EQUIVALENCE PROBLEMS FOR MONADIC SCHEMAS 



Joseph E. Qualitz 



June 1975 



MASSACHUSETTS INSTITUTE OF TECHNOLOGY 
PROJECT MAC 



CAMBRIDGE MASSACHUSETTS 02139 



EQUIVALENCE PROBLEMS FOR MOJJADIC SCHEMAS 

by 

Joseph Edward Qualitz 

Submitted to the Department of Electrical Engineering 
on May 15, 1975, in partial fulfillment of the 
requirements for the degree of Doctor of Philosophy 

ABSTRACT 

A class of monadic program schemas is defined. This class, called 
iteration schemas , consists of schemas whose programs comprise assignment 
statements, conditional statements , and iteration statements. These 
schemas are shown to correspond to program schemas which are structured, 
and are shown to be strictly less "powerful" than the monadic program 
schemas . 

A notion of equivalence is formalized as the functional equivalence 
of schemas under free interpretations , interpretations which represent 
symbolically the set of all interpretations of a schema. It is shown that 
the equivalence .problem for iteration schemas is unsolvable, even if the 
schemas possess highly restrictive properties. Questions are raised 
regarding the decidability of equivalence for various subclasses of 
iteration schemas, and equivalence is shown to be decidable for several of 
these classes. 

The equivalence problems for structured independent location 
schemas are examined in particular detail. A weak form of equivalence is 
shown to be undecid&ble for the schemas, and the general equivalence 
problem is shown to be related in a non- trivial manner to the equivalence 
problem for multi-tape finite automata. 
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v - +<x,y) 

u ♦- V 

v «- *(x,u) 

is equivalent to the sequence of statements: 

v *■ +(x,y) 
u - +(x,y) 
v *- *(x,v) 

which in turn is equivalent to the sequence: 

v - *<x,x) 
u - *(x,y) 

v ♦- +(v,u) 
u - +(x,y) 

if we view the sequences as portions of programs expressed in some 
prograianing language in which '+' and *** represent addition and 
multiplication, respectively. From a schema tological point of view, 
however, only the first two sequences are equivalent: the last sequence 
will be equivalent to the others only if the function associated with the 
symbol '*' distributes over that associated with the symbol *+' . 

1.2 Schematology: A Brief History. 

Ihe first schematized model for computation is generally attributed 
to lanov [ 9 ] . In his model, the data apace of. a computation is treated 
as a single entity which is altered via a sequence of function 
applications, the particular function to be applied at any point in the 
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sequence depending on the outcomes of a number of predicates applied to 
the current value of the data space. Rutledge [26] later demonstrated 
a correspondence between the Eanov model and a class of finite state 
automata, and it is not surprising, therefore, that the equivalence 
problem for Ianov schemas is solvable. 

The major difficulty with the Ianov model is that it discards much 
information about the essential properties of programs being represented. 
In particular, the data space of real computations is generally divided 
into a number of discrete components, and at each step in a computation 
functions and predicates are applied to certain subsets of these 
components, rather than to the total data space. The specification of 
the object components of each application establishes a data dependency 
relation among them, and it is precisely this relation which is missing 
from the Ianov model. 

Luckham, Park, and Paterson [16] proposed a more familiar 
schematized model — program schemas — in which data dependency 
is illustrated by associating a unique symbol with each component of the 
data space of a computation and specifying, by means of an uninterpreted 
program consisting of assignment instructions and transfer instructions, 
the sequence of functions and predicates to be applied during the 
computation and the object components of each applicet ion. They were 
able to demonstrate that such schemas are capable of simulating in a 
natural way multi-head finite automata [25] and thus that the equivalence 
problem for program schemas is unsolvable. 
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Much of the subsequent work in schematology has been devoted to the 
study of schematized models possessing special features which facilitate 
discussions of computational parallelism, determinacy, productivity, etc. 
(cf, [3], [5], [7], [10], [14], [21], [24], [2 7]). In several cases, 
which are discussed below, equivalence problems have also been considered 
in the work. 

1.3 Schematology: Equivalence Problems. 

Equivalence problems for schematized models have been of considerable 
interest to theoreticians since several open problems of long standing 
in automata theory can be shown reducible to, or closely related to, the 
equivalence problems for certain classes of computation schema s. For 
example, it has been demonstrated that the equivalence problem for 
multi-tape finite automata as defined in [23] is reducible to the 
equivalence problem for a particularly simple class of program schema s 
containing only monadic function and predicate symbols; similarly, it has 
been shown that the equivalence problem for deterministic pushdown 
automata is closely related to that for the class of schemas defined by 
deBakker and Scott [4]. But schema equivalence problems have certain 
practical applications as well, particularly with regard to the design 
of compilers. Since compilers frequently deal with programs containing 
user defined functions and subroutines which have, during compilation, 
no semantic content, procedures for deciding whether certain program 
transformations are equivalence preserving in a schematological sense 
are apt to be of great value, particularly if program optimization or 
simplification is to be attempted during the compilation process. For 
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example, if we are interested in whether the evaluation of some externally 
defined function ©ay take place during program execution at some point 
other than that indicated by its position within a given sequence of 
instructions (or indeed if it need occur at all), we are dealing with 
schematological issues. In fact, since program optimisation generally 
involves changing the structure of a program without changing its 
functional behavior, we must either be prepared to deal with issues of 
schematological equivalence or restrict any optimisation to those 
portions of a program which are completely interpreted at compilation 
time (or whenever such optimisation is to occur). Since increasing 
emphasis is being placed on encouraging the widespread sharing of 
procedures written by many different users:, each of whom can be 
assumed to know very little about the internal behavior of procedures 
written by others, the former option seems the more desirable. 

Thus far results concerning the decidability of equivalence for 
schematized models have been quite elusive, and in most cases in which 
results have been obtained for fairly general classes of schemes the 
results have been negative (i.e. have indicated the un*sieidability of 
equivalence), fhe few positive results include the somewhat trivial 
result for Ianov schema s mentioned earlier; the results of Ashcroft 
Manna, and Pnueli concerning monadic functional schema s [ 2 ]; the 
result (for a rather strong definition of equtvalence) of Keller for a 
class of program schemes [11]; and the results of Peterson for 
"progressive" program schema s (in which a computed value is immediately 
reused in the next computation step), and monadic program schemes 
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without nested loops in their control structures [l8l. In any case, the 
equivalence problems for a great many interesting classes of schemas are 
open and, despite the optimistic predictions of Paterson in [19], results 
have not been quickly forthcoming. 

1.4 Outline of the Thesis. 

In this thesis, we consider the problem of deciding equivalence for 
classes of program schemas (as defined by Luckham et al) which have been 
restricted in certain ways in an attempt to make the problem somewhat 
tractable. Primarily, we are restricting attention to program schemas 
which contain only monadic function and predicate symbols and which are 
structured in such a way as to represent only "whilish" programs: those 
composed of assignment statements, conditional statements, and iteration 
statements (i.e. "while" and "until" statements). Our choice of program 
schemas as a starting point for the study is motivated by the fact that 
they are quite general in their ability to model computations, and they 
permit a high degree of informality in discussions since they are 
inherently familiar to anyone who has dealt with any sort of programming 
language. Also, the equivalence problems for certain classes of the 
schemas have been studied rather extensively because of their relations 
to well-known problems in automata theory. 

We consider in this thesis several classes of schemas and our 
primary objective is to answer as many as possible of the questions we 
pose regarding the decidability of equivalence for the classes. But we 
are also interested in the relationships which exist among the classes 
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of schema s — particularly whether schema s in one class may be 
simulated by schema s in another, or whether the equivalence problem 
for one class of schema s is reducible to that for another. In this 
regard, the discussions in Sections 2.3 and 6.6 should be thought of 
not as diversions, but rather as attempts to meet tfhis objective. 

Roughly, the thesis is organized as follows: 

In Chapter II we define two classes of schemas: monadic program 
schema s and iteration schemas . We show that the iteration schemas 
correspond to a class of monadic program schemas whose graph 
representations possess a certain topological structure, and that this 
class of schemas is an incomplete class of monadic program schemas. 

In Chapter III we present an intuitive notion of schema equivalence, 
and formalize this notion as the functional equivalence of schemas for 
"free" interpretations, interpretations which symbolically represent 
families of related interpretations. We argue that this is a correct 
formalization of the intuitive notion. 

In the fourth chapter, we demonstrate that equivalence is not 
decidable for a restricted class of iteration schemas and pose questions 
about the decidability of equivalence for classes of schemas possessing 
additional restrictive properties. 

In Chapter V we show that the equivalence problem is solvable for 
certain classes of iteration schemes, and discuss fine extensions of 
these results to more general classes of schemas. 

The sixth chapter is devoted to a study of the equivalence 
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problems for a particular class of structured schemas (the independent 
location schemas) and the relation of such problems to the equivalence 
problems for certain automata theoretic models. 

Finally, in Chapter VII we summarize the main points of the thesis 
and suggest areas for further study. 
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CHAPTER II: MONADIC PROGRAM SCHEMAS AND ITERATION SCHEMAS 

In this chapter we define formally the classes of schema s we shall 
be concerned with, and present notions of schema interpretations and 
executions. 

2.1 Monadic Program Schema s. 

Figures 1 and 2 illustrate monadic program schemes; Figs. 3 and 4 
illustrate the schemas in flowchart form. 

2.1.1 Formal Definitions, 

The definitions given below differ in unessential ways from those 
in [16] or [18]. 

A monadic profOT schema (MPS) is a f ive-tuple S - <V, F, P, I, P) 
where : 

V is a finite set of variable symbols. 

F is a finite set of fu^c.l^on symbols. 

P is a finite set of predjca^e symbo^. 

I is a finite set of instruction labels . 

& is the program of S, a finite sequence of instruct ions of one of 
the following forms: 

(1) An afs^Knmenl? instruct; ion of the form 
i: x «- f (y) 
or of the form 

i: x •- y 
where i is an instruction label, f is a function symbol, and x and y are 
variable symbols. 
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(a) V = 


U,y} 




F = 


{f,g} 




P = 


{ P ,q} 




I = 


[lp ••• , 1 14 , 


e} 


V is the program 




V 


x *~ y 




i2 : 


P (x) i 3 ,i 10 




V 


x ♦- f(y) 




V 


p(x) i 5 , e 




V 


y - f(y) 




i 6 : 


P(y) i yJ e 




V 


x *- g(x) 




V 


y - f(x) 





i 9 : P (x) i 2 ,i 2 
i 10 . q(x) i n ,i 13 



X ll: X *~ Y 



■12' 



q(x) i Q ,e 



1 13 : P (x) I u ,i 12 
i ^: x •- f(x) 
e: END 



(b) V = 


{x,y} 


F = 


[f,g] 


P = 


[p,q] 


I = 


[il> ••• j i-io> e i 


&U 


s the program 


V- 


p(x) i 2 ' i 8 


i 2 : 


x «- f (x) 


l 3 : 


q(x) i 4 ,e 


V 


x - g(x) 


V 


q(x) i 6 ,i 10 


V 


y - g(y) 


h : 


p(x) i2>i2 


V 


y *~ g(y) 


V 


p(y) i-y±3 


V 


y - f(y) 


e: 


END 



FIGURE 1. Examples of Monadic Program Schemas. 
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V = {x,y,z} F = {f,g} P = {p,q,r} I = {i p ... , ± 2U , e] 

(P is the program: 

V x " y hv r(y) ^S'Hs 

i 2 : p(x) i 11 ,i 3 i 15 : y ,- g( y ) 

i 3 = y *- g(y) i : z «- f(z) 

i 4 : P(y) i 5 ,i 8 i 1? : p(z) ± l2 ,± l2 

i 5 : y «" g(y) i lg : y - f(y) 

i g : z - f(z) ± . z _ f ( 2 ) 

i 7 : P(Z) e ' e i 2 : P(Z) ^^IZ 

V y - f (y) i 21 : x - g(x) 

V z *" f < z > i 22 : y - f (y> 

i 1Q : P (z) e,e ± ^ : z - f( z ) 

hr x< " f(x) i 2 4 : p (z) hy 1 ^ 

i 12 : q ^ i 14' i i3 e: END 

i 13 : q(x) i 21 ,i 2 



FIGURE 2. Example of a Monadic Program Schema. 



f^.^^i^*^^,,^: -^ -^:j^¥^r^ r&'£i®KK<i±&&'': 
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* »■ f (x)| 



x +Ma& 



y ■** f (y) 



t 




FIGHSE 3. Schemas of Figure 1 in P] Form. 
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1 



x •- y 



- g(y) 




FIGURE 4. Schema of Figure 2 in Flowchart Form. 
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(2) A transfer instruction of the form 

i: p(x) i t ,i f 

where p is a predicate symbol, x is a variable symbol, and i, i , and l* 
are instruction labels. (We refet to i fc as the true alternative of the 
instruction and to i f as the false alternative . ) 

(3) A terminal instruction of the form 

i: END 

where i is an instruction label. 

We require that the program end with a terminal instruction and that 
this be the only such instruction in the program. In addition, we 
require that the label appearing as the left portion of each instruction 
be unique and that the true alternative and false alternative of each 
transfer instruction appear as the left portion of some statement in the 
program. 

Program schema s are conveniently represented in flowchart form. 
A flowchart for a schema is a directed graph whose nodes represent the 
instructions in the program of the schema. An assignment instruction 
is represented in the flowchart by a rectangle containing the righthand 
portion of the instruction; a transfer instruction is represented by an 
oval containing the center portion of the instruction; a terminating 
instruction is represented by a circle. An unlabelled arc is drawn from 
a node n to a node n' in the flowchart if n represents an assignment 
instruction in the program of the schema and n 1 represents the instruction 
which follows in the program. An arc labelled 't 1 is drawn from node n 
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to node n 1 in the flowchart if n represents a transfer instruction in 
the program and n* represents the instruction labelled with the true 
alternative of the transfer instruction. An arc libelled 'f is drawn 
from node n to node a' if n represents a transfer Instruction and n 1 
represents the instruction labelled with tfte false alternative of the 
transfer instruction. A single arc, emanating ftom no node of the 
flowchart, is drawn to the node representing the first instruction in 
the program. No other arcs appear in the flowchart. 

Clearly, representing a schema by a flowchart provides us with no 
new information about the computation being represented. A flowchart 
is merely a convenient form for representing the control structure of 
the schem's program and facilitates discussions of certain topological 
features of the structure. 

2.1.2 Interpretations and Executions. 

We provide an inKn-prafaMnn for an MPS by specifying a domain D 
of individuals; total monadic functions from D into B to be associated 
with the function symbols of the schema; total monadic predicates from 
D into f true. false ] to be associated with the predicate symbols of the 
schema; and particular elements of the domain to be associated initially 
with the variable symbols of the schema. Each such interpretation 
associates an idealized computer program with the schema and a 
corresponding execution of the schema, defined as follows: 

We initially associate the appropriate elements of the domain With 
the variable symbols of the schema. We then execute, in the order in 
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which they are encountered, the instructions in the schema's program. 
Execution of an assignment instruction of the form 'i: x ♦" f(y) 1 
causes the element ^(6) to be associated with the variable symbol x, 
where cp is the function associated with f by the interpretation and 
6 is the element associated with symbol y at the time of the execution. 
Executing an assignment instruction of the form 'i: x ♦- y 1 causes 
the element associated with y at the time of the execution to be 
associated with x. After executing either type of assignment instruction, 
we proceed to the next instruction in the program. 

Executing a transfer instruction of the form 'i: p(x) i^jif' 
consists of evaluating IIp(o-), where II is the predicate associated 
with p by the interpretation and a is the element associated with x at 
the time of the execution, and then branching to the instruction labelled 
with i t or i f , according as the outcome of the evaluation is true or 
false . 

Executing the final instruction of the program causes the execution 
to terminate. If an execution terminates, the final set of elements 
associated with the variable symbols of the schema is taken to be the 
value of the schema for that execution and for the corresponding 
interpretation. (The value is undefined if the execution fails to 
terminate. ) 

2.1.3 Free Interpretations. 

In subsequent chapters we will deal almost exclusively with a 
particular subset of the possible interpretations for a schema: the 
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free , or Herbrand . interpretations. 

Formally, a free interpretation for an MPS with variable symbols V, 
function symbols F, and predicate symbols P consists of: 

(1) The domain D - F*-A v , where Ay is the *»* i&x I » £ V}. 

(2) The initial association of the element A ? with each symbol 
x 6 V. 

(3) The association of the total function cp : D -♦ D defined as 
cp f (6) ■ f*6, 6 € D, with each function symbol f In F. 

(4) The association, with each predicate symbol p in P, of some 
total predicate II: D •+ (true . false }. 

We note that each free Interpretation for a schema has the same domain, 
a set of strings which represent symbolically the values which may be 
associated with variable symbols during execut ions of the schema. In 
fact, the significance of the free interpretations is that they represent 
symbolically the set of al| interpretations for a schema. In particular, 
we shall argue in the next chapter that, with regard to equivalence 
problems, we may restrict attention solely to free schema interpretations. 

2.1.4 Classes of Monadic Program Schema s. 

In this section we define three classes of monadic program schema s: 
the free schemas, the independent location schemas, and the restricted 
location schemas. A fourth class, the structured schemas, is discussed 
in the following section. 

An MPS is free if no predicate is ever applied twice to the same 
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value during an execution of the schema defined by any free interpretation 
for S. Intuitively, if S is free then either outcome is possible whenever 
we apply a predicate to a value during an execution defined by a free 
interpretation for S — the outcome is not constrained by the outcomes 
of previous applications. 

The reader may verify that the schemas of Figs. 1(b) and 2 are free, 
while that of Fig. 1(a) is not. 

An MPS is an independent location schema if every assignment 
instruction in its program is of the form 

i: x *- f(x) 
for some variable symbol x and some function symbol f, i.e. if the 
argument variable and the assignment variable are one and the same in 
each assignment instruction. (If we associate a location in a data 
space with each variable symbol of such a schema, these locations are 
independent in the sense that each value computed during an execution 
of the schema is stored back in the location from which the corresponding 
argument value was obtained — hence the name independent location.) 

The schema of Fig. 1(b) is an independent location schema; the 
schemas of Figs. 1(a) and 2 are not independent location. 

An MPS is a restricted location schema if it is an independent 
location schema except, possibly, for some number of initial assignment 
instructions of the form 

i: x ♦- y 
where x and y are variable symbols and i is an instruction label which 
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is not the true or false alternative of any transfer instruction in 

the schema's program. (This last condition ensures that such instructions 

are executed only at the start of each execution of the schema.) 

The schema of Fig. 2 is a restricted location schema, as is the 
schema of Fig 1(b). (Clearly, any independent location schema is a 
restricted location schema.) The schema of Fig. 1(a) is net a 
restricted location schema. 

We note here (and the reader may verify following Chapter III) that 
the restricted location schema s form an incomplete subclass of the 
monadic program schema s, and the independent location schema s form an 
incomplete subclass of the restricted location schema e. We note also 
that the free monadic program schemas, free restricted location schemes, 
and free independent location schemas form incomplete subclasses of the 
monadic program schemas, restricted location schemas, and independent 
location schemas, respectively. 

2.1.5 Structured Monadic Program Schemas. 

In the flowcharts of Figs. 3 and 4 there are several instances of 
an arc labelled with both 't' and 'f emanating from a transfer node, 
an obvious shorthand notation for a pair of arcs, one labelled 't' and 
the other labelled *f', which terminate at the same node. In such a 
case, the corresponding transfer instruction in the represented 
program is clearly functioning as a ' CoTo 1 statement, necessary in a 
sequential program but superf lous in a flowchart representation. 
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We may eliminate such transfer nodes from a flowchart after 
redirecting any arcs which terminate at such a node to the node's 
successor. We refer to the resultant flowchart as reduced, and note 
that while it may no longer represent a valid program schema, it 
never- the- less represents a computation functionally equivalent to the 
original. 

Figure 5 shows the reduced flowchart constructed from the 
flowchart of Fig. 4. It also shows the decomposition of the reduced 
flowchart into simple blocks: 

A block is a piece of reduced flowchart which has no more than a 
single exit (which may consist of many arcs that terminate at a single 
node) and arbitrarily mnay entrances. A transfer node in such a block 
is a main node of the block if it is not contained in some sub-block, 
and a block is a simple block if it contains no more than one main 
transfer node. We say that an MPS is structured if it can be decomposed 
into simple blocks, as is the case in Fig. 5. 

A few words about the above definition are in order: 

Most of the results in this thesis pertain to monadic program 
schema s which are structured in such a way as to represent 'while' 
schema s — schemas whose programs comprise assignment instructions, 
conditional instructions, and iteration ("while" or "until") 
instructions. It has been demonstrated by Ashcroft and Manna [ 1 ] 
that any program schema may be transformed into a schema so structured, 
in such a way that its output behavior is not affected; in addition, if 
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-z«~f(z) 4 — y«- g(y) 




**-f(z) 4 — y-f*y) ■ 



FIGURE 5. Structured Schema. 
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the original program schema contains only monadic function and predicate 
symbols, then so does the resultant structured schema. 

Unfortunately, the Ashcroft and Manna results have, for our 
purposes, a serious drawback: the resultant 'while' schemas will 
contain, in general, conditional and iteration instructions containing 
compound predicate expressions, i.e. expressions composed of a number 
of simple predicates connected by boolean operators. Moreover, the 
argument variables of the predicates within a given expression need 
not be the same, and in general cannot be the same. 

If we were to define 'while' schemas in the same manner as do 
Ashcroft and Manna, we would defeat our purpose in restricting attention 
to monadic schemas in the first place, since transfer-type instructions 
would have to contain non-monadic predicate structures rather than simple 
predicates. What we have chosen to do instead is define a class of 
strictly monadic 'while' schemas, the iteration schemas of the next 
section, which correspond precisely to the structured schemas we 
have defined above. It should be emphasized, however, that unlike the 
'while' schemas of Ashcroft and Manna, the iteration schemas form a 
strictly proper subset of the monadic program schemas. 

In the following section, we formalize the notion of iteration 
schema. The correspondence between these schemas and the class of 
structured program schemas is established in Section 2.3. 
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2.2 Iteration Schema s. 

Figure 6 illustrates an iteration schema representing a computation 
functionally equivalent to that represented by the structured MPS of 
Fig. 5. 
2.2.1 Formal Definitions. 

A (monadic) iteration schema is a five- tuple 
S - (V, F, P, Z,tf>) 

where : 

V is a finite set of variable symbols . 

F is a finite set of function symbols . 

P is a finite set of predicate symbols . 

E is a finite set of iteration schema s, the subschemas of S. 

$ is the program of S, a finite sequence of statements of the 
following types: 

(1) Assignment statement of the form 

x - f (y) 
or of the form 
x *- y 
where x and y are variable symbols and f is a function symbol. 

(2) Conditional statement of the form 

IF p(x) THEN S t ELSE S 
where p is a predicate symbol, x is a variable symbol (the test variable 
of the statement), and S and S are subschemas (the true and false 
subschemas of the statement, respectively). 
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s = ({x,y,z}, {f,g}, {p,q,r}, 

{s 1 ,...,s 7 }, 5>) 



s l " ({x,y,z3, {f,g}, {q,r}, 

f s 4 ,...,s 7 ], g^) 
S 2 = CCy.a], {f,g}, 0, 0, (? 2 ) 



$ : x - y 

WHILE p(x) DO S l 

y •" g(y) 

IF p(y) DO S 2 ELSE S 3 

iJ^: WHILE q(y) DO S 4 
WHILE q(x) DO S 5 



W 2 : y *" zW 

z *- f(z) 



s 3 - ({y,z}, [f }, 0, 0, 5> 3 ) 



s 4 = ({y,z}, {f,g}, {r}, 
C S 6» S 7 } » *V 



P 3 : y - f(y) 

z «- f(z) 
? 4 : IF r(y) THEN S 6 ELSE S 



S 5 = ({x,y,z}, {f,g}, 0, 0, pp 



8 5 : x - g(x) 

y - f(y) 

z - f(z) 



s 6 = ({y,z},{f,g}, 0, 0, 5> ) 



s ? - ({y,z}, {f}, 0, 0, ff 7 ) 



z •- f(z) 

$ 7 '- y - f(y) 

z - f(z) 



FIGURE 6. Iteration Schema Equivalent to the Schema of Figure 5. 
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(3) Iteration fttftt«Wff«fc o£ the £ocm 
WHILE p(x) DO S 
or of the form 

USEE, p<x) DO 3 ± 
where p is a predicate symbol, x is a variable symbol (the test variable 
of the statement), and S is a subschema (the b o j dy of the statement). 

If S' - (V, F' , P', £', g>') is a subschema of S, then we require 
that V 1 c v, F* c F, P 4 e P, and £' c £. We do not permit recursion 
in iteration schema s: no iteration schema may be a subschema of itself. 

I nterpretations are defined for iteration schema 8 in a manner 
identical to that for program schema s. Each interpretation defines an 
execution by the schema in a manner similar t& that for program schema s: 

We associate the specified domain elements with the variable 
symbols of the schema, and then execute sequentially the statements in 
the schema's program. New values are associated with variable symbols 
as indicated by assignment statements, and the programs of appropriate 
subschemas are executed in accordance with the outcomes of predicate 
applications made while executing conditional or iteration statements. 
The execution terminates when and if the execution of the final 
statement in the schema's program is completed. If the execution 
terminates, we take as the vafoe of the schema for the execution 
(and corresponding interpretation) the set of elements associated 
with the variable symbols of the schema at the end of the execution; 
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the value of the schema is undefined if the execution fails to 
terminate. 

Free interpretations are defined for iteration schemas as in 
Section 2.1.3. 

2.2.2 Classes of Iteration Schema s. 

Fjea. iteration schema s, jadeflejidenfe lflcat|^n iteration schemes, 
and restricted location iteration schemas are defined in manners 
analogous to those for program schemas. 

We define two additional classes of iteration schemas which will 
be of interest in subsequent discussions: 

An iteration schema is conditlonaJ.-f ree if no conditional 
statement appears in its program, and no conditional statement appears 
in the program of any of its subschemas. 

An iteration schema is a si ngle appearance schema if no predicate 
symbol appears in more than one statement in the collection of programs 
belonging to the schema and its subschemas. 
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2.3 Structured Monadic Program Schemes and Iteration Schemes: 
A Correspondence. 

We have asserted that the iteration schemas of the preceding 
section are an alternate formalization of the structured monadic program 
schemas of Section 2.1.5. In this section, we describe informally 
effective procedures for proceeding from one formalization to the other. 
Of course, we have not yet made precise the notion of schema equivalence, 
but the procedures are highly intuitive and are correct for virtually 
any reasonable notion of equivalence. 

It is quite an easy task to construct from an arbitrary iteration 
schema a functionally equivalent structured MPS": 

Let S be an arbitrary iteration schema and suppose that we are 
able to express each subschema of S as an equivalent composition of 
simple blocks. Then we can express each statement in the program of S 
as an equivalent composition of simple blocks, as follows: 

(1) If the statement is an assignment statement «, then the 
equivalent composition of blocks is: 



-^L 



\ 






(2) If the statement is a conditional statement of the form 

IF p(x) THEN S fc ELSE S f 
then the equivalent composition of blocks is: 
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Where B (B f ) is the 
composition of simple 
blocks equivalent to 
subschema S (S^). 



(3) If the statement is an iteration statement of the form 
WHILE p(x) DO S ± 
then the equivalent composition of simple blocks is: 




Where B. is the 
composition of simple 
blocks equivalent to 
subschema S . . 



The last case (the statement is an UNTIL statement) is similar to 
the third. 

The structured MPS equivalent to the schema S is formed quite simply 
by connecting sequentially the compositions of simple blocks corresponding 
to each of the elements in the program of S. 

It is now clear that we can construct an equivalent structured 
MPS from any iteration schema — we need only work from the inside 
out, i.e. we need only begin with subschemas composed solely of assignment 
statements, then those composed of these schemas and assignment statements, 
etc. 
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The reverse construction is equally straightforward: 
We begin by replacing each rectangle in the flowchart of a 
structured MPS by its contents enclosed in brackets, (The brackets 
will denote a portion of the flowchart which has been converted to 
equivalent iteration schema form.) We then merge the contents enclosed 
in adjacent brackets, i.e. I becomes 



E «] 
[t] 






When we have completed this merging, either the entire flowchart 
will consist of a bracketed expression (followed by an END node), in 
which case we have completed the construction, or the flowchart will 
contain structures of the form: 



or of the form: 
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We replace the first type of structure with: 

where S a becomes the subschema 
[iF p(x) THEN S a ELSE Sp ] with program a, and S p becomes 

the subschema with program p . 

and the second with: 

[WHILE p(x) DO S a "] if b is 't', or [UNTIL p(x) DO S a ] if b is *f ' , 

where S a becomes the subschema with program oc . 

This procedure is repeated recursively until the entire remaining 
"flowchart" consists of a single bracketed expression followed by an 
END node. In such a case, the expression in brackets is the program of 
the iteration schema equivalent to the original structured program 
schema, with subschemas as given above. 

2.4 Incompleteness of Iteration Schemas. 

Our reason for selecting iteration schemas as the primary 
computational model of the thesis is that we wish to deal with 
equivalence issues for a class of schemas less "powerful" than the 
class of monadic program schemas, but still general in its ability to 
represent computation. Iteration schemas clearly satisfy the latter 
criterion, but we might question whether they satisfy the former. 
Clearly there exist monadic program schemas which are not structured, 
but do the structured schemas represent a complete subset of the 
monadic program schemas? In particular, we might ask if the presence 
of boolean operators is really essential for the simulation of arbitrary 
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MPS's by 'while' schemes, or whether any MPS nay be simulated by an 
iteration schema. 

In this final section of the chapter, we demonstrate that such 
operators are indeed essential for the simulation of arbitrary MPS's 
by 'while' schemes. (In the following chapter, we define formally 
schematic equivalence. For the purpose of the following discussion we 
state that a pair of schemes are not equivalent if there exists an 
interpretation for the schemes such that the execution of one schema 
terminates, while that of the other schema fails to terminate.) 

Consider the MPS of Fig. 7(a) . It is intuitively obvious 
(and can be derived innediately from results in £l4] ) that if S is 
equivalent to some iteration schema, it is equivalent to some iteration 
schema which has predicate symbols {p,q} and function symbols {f,g}. 

We note that an execution of S is guaranteed to diverge if it is 
defined by an interpretation in which the predicate associated with p 
and that associated with q are each identically true . Let I denote the 
free interpretation which satisfies this condition. 

Now, suppose that there exists an iteration schema S* equivalent 
to S. S* must contain at least one WHILE statement s containing one 
of the predicate symbols, say p, such that s is executed during the 
execution of S' defined by I. Let D denote the domain of I, and let X 
denote the set of elements of D at which the predicate associated with q 
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(a) 




(b) 






IF p(x) THEN 


x «- f (x) 

y «- x 






WHILE (p(x) 


q(y)) DO 




IF p(x) THEN 


x ♦- g(x) 
y *- x 



x *- f (x) 
y ♦- x 

ELSE 



r x «- f (x) 

I y «- x 



ELSE 



x 



FIGURE 7. Unstructured Schema and Equivalent 'While' Schema With 
Boolean Operators. 



*i, ■. -to ; 
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is evaluated prior to the first execution of statement s. Let I' be the 
free interpretation differing from I only in that II ' is associated with 
q, where II * is the predicate defined as follows: 

n '(6) * tpie . o € X 
n ' (6) = false. § £ X 

The execution of S' defined by I 1 clearly cannot terminate since the 
behavior of S* for I and I' is identical until statement s is executed, 
whereupon S must diverge because the predicate associated with p is 
identically £ru£. But the execution of S will terminate as soon as II ' 
is evaluated at an element of (B-X), and since X is finite and I' is a 
free interpretation, EL 1 must eventually be evaluated at an element of 
(D-X), contradicting the equivalence of the two schema s. 

A 'while' schema containing boolean operators is shown in part (b) 
of Fig, 7; the reader may verify that this schema is equivalent to the 
schema S. 
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CHAPTER III: EQUIVALENCE 

3.1 Equivalence - Introduction. 

Intuitively, we wish to consider a pair of schemas equivalent if and 
only if the value of each schema is the same whenever both schemas have 
been provided with the same interpretation. This notion of equivalence 
is rather strong. In particular, it is a much stronger notion than 
would be desirable if we intended to apply schematological results to 
interpreted models, since it provides no mechanism for the specification 
of any relations which might exist among the functions and predicates 
comprising the schema primitives. But this is precisely what makes it a 
logical notion of schematological equivalence: equivalent schemas are 
required to exhibit the same "black box" behavior, i.e. they are required 
to exhibit, for each interpretation, the same output behavior, with no 
constraints on their internal behavior. 

The notion of equivalence as we have presented it does, however, 
have a serious drawback: it makes sense only if applied to pairs of 
schemas which have the same sets of predicate symbols, function symbols, 
and variable symbols. This is indeed unfortunate, since we would 
certainly like to consider the schemas S and S 1 of Fig. 8 equivalent, 
despite the fact that S 1 contains a function symbol and a predicate 
symbol not contained in S. Likewise, we might wish to add variable 
symbols to a schema in order to remember intermediate values during an 
execution, without considering the affects of these new symbols on the 
resultant schema value. (In fact, the addition of such variable symbols 
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S = ({x,y}, {f}, 0, 0, P) 
where (y is: x *- f(x) 
y - f(x) 



S* = ({x,y}, {f,g}, { P }, {S 15 S 2 }, 5>) 
where Qr ' is: x «- f(x) 

y - g(y) 

IF p(y) THEN S x ELSE S £ 

and S 1 = ({x,y}, {f}, 0, 0, 0\) 
where Qr is: y <- f(x) 

and S 2 = ({ Xj y} 5 £ f }, 0, 0, 1? 2 ) 



IP. is: 

y - f(y) 



where \¥ „ is: y <- x 



FIGURE 8. Equivalent Schemas With Distinct Sets of Predicate Symbols 
and Function Symbols. 
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is necessary, in general, if one wishes to transform an arbitrary MPS 
into an equivalent 'while' schema in which boolean operators are 
permitted.) 

We may handle the problem caused by schemas with distinct sets of 
predicate symbols and function symbols by considering extensions of 
interpretations. If we permit an interpretation for a schema to 
associate predicates and functions with symbols which do not appear 
in the schema, we may extend any interpretation in such a way as to 
provide an interpretation for some other schema. If we begin with 
consistent interpretations for a pair of schemas (i.e. interpretations 
which do not associate distinct functions with a common function symbol 
or distinct predicates with a conmon predicate symbol), then we may 
easily construct an interpretation which is an extension of each of the 
interpretations. Thus we may consider a pair of schemas to be equivalent 
if, whenever they are provided with consistent interpretations, the value 
of the schema for its interpretation is the same in each case. 

The problem posed by pairs of schemas with distinct sets of variable 
symbols could be handled quite easily by adding a sixth component in our 
definition of schema — a subset of variable symbols which would be 
considered output symbols, symbols whose values at the end of an 
execution would comprise the value of the schema for that execution. We 
prefer to live with the shortcomings of our present notion, however, 
rather than introduce such a component, since the presence of non-output 
symbols in the schemas would add in unessential but tedious ways to the 
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complexity of certain proofs in subsequent chapters. Also, we would 
not gain much by its introduction, since most results concerning the 
decidability of equivalence for classes of schema s with "total output" 
imply the same results for corresponding classes of schemes with 
specified output symbols. In particular, suppose we have a pair of 
schemas with a cnranon set of output symbols, plus some other variable 
symbols which may be different in each case. We can add additional 
variable symbols to each schema to ensure that the set of such symbols 
is the same in each case, and then add to the end of each program the 
statement f x - y', for each non-output symbol x end some specified 
output symbol y. Clearly* the resultant schemas will be equivalent in 
the sense we have proposed if and only if the original schemas are 
equivalent when attention is restricted to particular output symbols. 

Earlier we defined the class of free interpretations for schemes, 
and noted that each free interpretation represents symbolically a family 
of closely related interpretations. It would be quite convenient if we 
could restrict attention to free interpretations in pur discussions of 
equivalence, since such interpretations have several desirable 
properties. For one thing, all free interpretations for a schema have 
the same domain and interpret each function symbol in the same manner. 
Hence, we may specify a free interpretation solely by specifying the way 
it interprets predicate symbols. Also, during an execution defined by 
a free interpretation for a schema, identical values may be generated 
only if they are generated via precisely the same sequence of function 
applications, and the value itself makes explicit this sequence. In 



- 45 - 

addition, the application of a function to a value during such an 
execution must result in a different value, and this value must be 
longer than the original when viewed as a string of symbols. This 
last property is particularly significent when dealing with restricted 
location schema s, since it implies that the sequence of values associated 
with any variable symbol during such an execution will be a sequence of 
strings of strictly increasing length, -e*eh -ar Ropier suffix of the next. 
Finally, and perhaps most importantly, we can^exploit tine property of 
freeness in a schema only if we are dealing with executions of the 
schema under free interpretations. 

Fortunately, it is easy to show that a pair of schemes are 
equivalent for all interpretations if iand only If (they are equivalent 
for all free interpretations. It is only necesaary to show that if 
there exist consistent interpretations which demonstrate the non- 
equivalence of two Bchemas, then the free interpretations which 
represent them symbolically are also consistent and also demonstrate 
the non-equivalence of the schemes* The proof of the first part of the 
statement is trivial; the proof of the second pert is by induction on 
the lengths of the final values of variable* for the executions defined 
by the free interpretations, and is also stiaM^t^r^rd» The reader 
is referred to [14 J for details. 
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3.2 Strong Equivalence - Definition. 

We term the notion of equivalence we have just discussed strong 
equivalence, since it is strong enough to imply most other reasonably 
defined forms of equivalence. Formally: 

Let I be an interpretation for some schema, and let D be the 
domain of the interpretation. Let F be a set of function symbols and 
P a set of predicate symbols which are not interpreted by I. Then a 
(P.g)-extension of I is the object formed by adjoining to I, for each 
symbol p in P, a total predicate H : D -♦ ftaaie.ialee l. and for each 
symbol f in F, a total function cp : D -» D. 

Let S^ and S^ be arbitrary schemae with possibly distinct sets of 
function or predicate symbols. Let 2-^ and P. denote the sets of 
function symbols and predicate symbols, respectively, which appear in 
S^ but not in S . Similarly, let F 2 and P 2 denote the sets of function 
symbols and predicate symbols which appear in S 2 but not in S.. Then 
an interpretation I x for S^ is consistent with an interpretation I 2 for 
S 2 if some (P 1 ,F 1 )-extension of I 2 is a <P 2 ,F ) -extension of 3^. 

A schema S^^ is strongly equivalent to a schema S 2 if the value of 
S 1 for a free interpretation 3^ is the same as the value of S- for a 
free interpretation I , whenever Ij^ and I are consistent. 

Unless otherwise noted, equivalence shall refer to strong 
equivalence in the remainder of this thesis. 
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3.3 Weak Equivalence — Definition. 

Several other notions of equivalence have been proposed in the 
literature, one of which will be of interest later when we explore the 
way in which equivalence problems for structured and unstructured 
independent location schemas are related: 

Schemas S and S 2 are weakly equivalent if the value of S, for an 
interpretation I., is the same as the value of S for an interpretation 
I2, whenever I and I- are consistent free interpretations and both 
values are defined. 

It should be noted that weak equivalence is not, in fact, an 
equivalence relation. In particular, the relation is not transitive 
since any pair of schemas are each equivalent to one whose executions 
diverge regardless of interpretation. 
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CHAPTER IV: UNSOLVABLE PROBLEMS 

Luckham, Park, and Paterson have demonstrated in [16] that the 
equivalence problem for monadic program schemes is recursively 
unsolvable. Briefly, thay have demonstrated that the schema s are 
capable of simulating two-head finite automata, and have noted that 
the equivalence problem for the automata was shewn unsolvable in [25]. 
The schema s which they constructed to simulate the automata were 
independent location schema s except for an initial assignment instruction 
of the form 'x ** y' (which corresponds to the placing of both heads on 
the tape of an automaton) and we have, therefore, that equivalence is 
undecidable for restricted location monadic program schemas. 

The example in Section 2.4 demonstrates that restricted location 
iteration schemas are strictly less powerful than restricted location 
MPS's. Moreover, it can be shown (cf, [13]) that there exist restricted 
location MPS's which cannot be simulated by restricted location 'while' 
schemas, even if we permit boolean expressions in conditional and 
iteration statements. (Informally, the reason we cannot, in general, 
construct such a simulating schema is that the flowchart of an arbitrary 
restricted location MPS may contain a directed cycle with many different 
exits. To place such a cycle in 'whilish' form requires merging all of 
these exits into one, and "remembering" the values of relevent variables 
at points in the new cycle which correspond to the exit points in the 
original cycle. When the merged exit is taken, the correct values may 
then be associated with each variable symbol, based on which of the exits 
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would actually have been taken in the original flowchart. The 
appropriate values are remembered by assigning them to new variable 
symbols, and it is precisely these assignments which prevent the 
resultant schema from being a restricted location schema, since they 
must be made within the cycle at points corresponding to the original 
exits. ) 

It is clear, therefore, that structured restricted location 
schemas are significently less powerful that restricted location 
schemas in general, and we might hope that the added structure is 
sufficient to render equivalence decidable for such schemas. 

Unfortunately, this does not prove to be the case. In fact, we 
are able to prove that equivalence is undecidable even if we look at 
restricted location schemas which are "totally" structured — those 
in which even conditional statements have been removed. 

In this chapter we prove that equivalence is undecidable for 
restricted location iteration schemas, and that it is also undecidable 
for such schemas which are conditional-free. For lucidity, we present 
the result for the more general class of schemas first, and then discuss 
the way in which the procedure may be strengthened to establish the 
result for the conditional-free schemas. 
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4.1 Post's Correspondence Problems. 

We begin by considering two well-known unsolvable problems: the 
Post Correspondence Problem and the Modified Post Correspondence Problem. 

A P£S£ Correspond^e Problem is an ordered pair 

C - <A,B) 

where A - { w^ w ... , u } 1 £ i £ k, <» ± , V^ € {0,l}* 



B - { Y 1 , Y 2 , ... , Y } 



and W = Sj • s 



W '•• * 8 i 6 S ij» r i. € t0 ' l} 

•r. • ... Ti 
1 x 2 l °< 



y. - r., «r. • ... 'Ti 



'i 
We say that the Post Correspondence Problem C has a soj.utj.on if 

and only if there exists a sequence of integers i 1( ... t i , m ^ 1, 

i m 

l^i ^k, l^n^m, such that 
n 

A Modified Post Correspondence Problem is a pair (C,X), where C 
is a Post Correspondence Problem as above, and I is an integer, 1 ^ & <. k. 
We say that the modified problem has a solution if and only if there 
exists a sequence of integers i^,...,i , m ^ 0, 1 ^ i £ k, 1 £ n ^ m, 

- ' Y i 

m 

It is recursively undecidable whether a given Post Correspondence 
Problem or a given Modified Post Correspondence Problem has a solution. 
(See, for example, [ 8 ]. ) 



such that 














U) . 10 . 


1 
x 2 


. U) 


= 


Y • Y, . Y, 

X il i 2 
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4.2 A Note on Notation. 

We will generally define schemes in terms of their programs and 
the programs of their subschemas only, the function, predicate* and 
variable symbols being defined implicitly as these appearing in the 
programs. In most cases, in fact, we will not bother to distinguish 
between a schema and its program, referring to either as "scheme 1 '* 

When convenient, we will permit compound boolean expressions to 

appear in conditional statements of an iteration schema. We note 

that 

IF (~»b) THEN S t ELSE S^ 

for any boolean expression b is equivalent to 

IF b THEN S- ELSE S„ 
* t 

and that 

IF (b V b') THEN S fc ELSE S f 
for any boolean expressions b and b' is equivalent to 

IF b THEN S_ ELSE S' 

t 

where S' is 

IF b' THEN S t ELSE S^ 
fc f 

and we are assured, therefore, that permitting boolean expressions in 
conditional statements is indeed a notations! convenience, and does not 
in any way alter the class of computations representable by iteration 
schema s. 
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4.3 Undecidability of Equivalence for Restricted Location Iteration 
Schemes. 

Let C be a Poet Correspondence Problem as defined in Section 4.1. 
We show how to construct a restricted location iteration schema S with 
the property that some free interpretation I defines a terminating 
execution of S if and only if the problem C has a solution. 

Let Sg be the iteration schema whose program is empty, and let S 
be the schema: 

WHILE p(x) DO S £ 
UNTIL p<x) DO Sg 

for some predicate symbol p and some variable symbol x. That is, S. is 
a schema for which each interpretation defines a non-terminating execution. 

Let p and p be distinct predicate symbols different from p, and let 



Sq be the schema: 



IF (p Q (x) A (-tpjU))) THEN S ELSE S f 



and let S., be the schema: 

IF (p,(x) A (~ip (x))) THEN S_ ELSE S t 
1 E T 

Suppose we interpret the predicate symbols p, p Q , and p^ over some 

domain D. We may consider an element of the domain as representing the 

symbol '0' if, when this element is initially associated with symbol x, 

the execution of S defined by the interpretation terminates. Similarly, 

we may consider the element as representing the symbol '1' if, when the 

element is initially associated with x, the execution of S defined by 
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the interpretation terminates. Viewed in this way, no element of D may 
represent both '0' and ' 1', although some elements may represent neither 
symbol. 

For each i, 1 s; i <; k, let A w be the schema: 

i 

IF q(x) THEN S g> ELSE S 

x ♦- f (x) 

IF q(x) THEN S o ELSE S 
s. f 

2 
x «- f (x) 



IF q(x) THEN S o ELSE S t 

1§ i 

x «- f (x) 

(In the above, q is some new predicate symbol and S g denotes, for each 

j, the schema S or the schema S , according as s^ is or 1.) 

J 

In this manner we associate a schema with each string of symbols in 

the first component of the problem C. If we provide an interpretation 

with some domain D for the schema A u , then the execution of A u 

1 i 

defined by the interpretation will diverge unless the sequence of symbols 

represented (in the way described above) by the elements v, cp (v ), 

6.-1 f 

q> (9f(v)), ... , cp x (v) comprise the string u , where v € D is the 

i 

value initially associated with x and cp : D -♦ D is the function 
associated with f by the interpretation. The execution will also diverge 
if any evaluation of the predicate associated with q has outcome false 
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during the execution. (The reason for the inclusion of q in the schema 
will become apparent later.) 

Let S ' be the schema identical to S except with variable symbol y 
in place of variable symbol x; let S ' be the schema identical to S 
except with y in place of x. 

For each i, 1 s i i k, let B v be the schema: 

T i 

IF q(y) THEN S r * ELSE S. 

y - f (y) l 

IF q(y) THEN S • ELSE S + 
r i 

y - f (y) 2 



IF q(y) THEN S ' ELSE S t 

y - f (y) a i 

(In the above, S * denotes, for each j, the schema S ' or the schema 
S ' according as r^ is or 1.) 

These schemas correspond to the strings in the second component of 
C in the same way as those defined previously correspond to the strings 
in the first. 



For each i, 1 < i < k, let R. be the schema: 

IF t.(z) THEN Au ELSE S 
i E 

IF t (z) THEN B Y ELSE R 
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where each t. is a distinct new predicate symbol. 
Let R, be the schema: 

IF t,(z) THEN A u ELSE S w 
•L IE 

IF t x (z) THEN B Y ELSE ^ 
z - f(z) 

and let R, be the schema: 

IF t. (z) THEN Au ELSE S_ 
K k E 

IF t. (z) THEN B Y ELSE S 4 
k Y k t 

Finally, let S be the schema: 

y *- x 

IF p T (z) THEN R ELSE R 
I 11 

WHILE p (z) DO R 

IF q(x) THEN S ELSE S 
t E 

IF q(y) THEN S t ELSE S_ 
• E 

We claim that some execution of S under a free interpretation will 

terminate if and only if the Post Correspondence Problem C has a 

solution. In particular, suppose that some such execution of S 

terminates. Let n denote the number of times during the execution of S 

that the subschema R. is executed, and let t 4 , t* ..... t be the 

1 J l J 2 Jn 

sequence of t's whose applications resulted in true outcomes during the 

executions of R^. It is clear from the construction that the value of 

m-i 
x at the end of the execution of S must be f "A , where m = 

x 1 

| w • <*> • ... • <*> . |, and that the value of y at the conclusion of 
J l J 2 J n 
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the execution must be f 'A , where m » I Y» Y ■•'...'• Y I. 

2 h h Jn 

Also, the sequence of symbols represented by the elements 

A vt f'A x , ... , f -A,, must comprise " - ■« • u • ... • u , 
. x v *l h Jn 

otherwise the execution of S would have diverged at the execution of 

some subschema Ay when it was discovered that the wrong symbol, or 

no symbol at all, was represented by an element. Similarly, the 

Xtto 

sequence of symbols represented by A „ f # A_, ... , f *A„ must 

x . * ■ x 

comprise Y » Y 4 • Y. • . . . • Y , and therefore it must be the case 

3 1 h Jn 

that w is a prefix of Y , or vice versa. 

But it must also be the case that m. and m are identical: 

The value associated with x is tested with the predicate 
corresponding to symbol q each time a statement of the form *x *~ f(x)' 
is executed, and similarly for the values associated with y. In each 
case but the last the outcome of the test is true, otherwise the 
execution would have diverged. Now, suppose that m. and nu are not the 
same; in particular, suppose that m, > m_* It mast be the case that 
II (f A x ) is ferae (where B_ is the predicate associated with q). But 
then the execution of S would have diverged when the fifth statement in 
its program was executed, a contradiction. Hence W. " su. 

But then it must be the case that w = Y, and thus 1 , ... , j„ 

1* n 

must be a solution to the correspondence problem C. 



m 



m 
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The remaining argument, that some execution of S under a free 

interpretation terminates if C has a solution, is also quite easy. 

Suppose that i. , ... ,i is a solution for C. Then we provide S 
i m 

with the free interpretation that associates with p the predicate: 

II (f *A ) = true if the (n+l)st symbol of «*>•...•(*>. 
p x 1 1 i 

is 0, or false otherwise 

that associates with p 1 the predicate: 

n 
II (f *A X ) = true if the (n+l)st symbol of w. • . . . • w 

is 1, or false otherwise 
that associates with q the predicate: 

II (f *A ) = false if n = | (*>•... *w . 1, or true 
otherwise 

that associates with t , 1 ^ j ^ k, the predicate: 

J 
n 
II. (f -A ) = true if j = i , 1 ^ n ^ m, or false 
fc j z n+1 

otherwise 

that associates with p the predicate: 

n 
II (f *A ) = true if n < m, or false otherwise 

and that associates with p an arbitrary predicate. 

The reader will verify that the execution of S defined by the above 
interpretation is guaranteed to terminate. 

From the above construction we have: 
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Theorem 4.1 : 

The equivalence problem for restricted location iteration schemas is 

unsolvable. 

Proof : Suppose that the equivalence problem were solvable. Given an 
arbitrary Post Correspondence Problem C we could construct a 
restricted location iteration schema S as outlined above. The 
correspondence problem would have a solution if and only if 
S were not equivalent to the schema S , and we would therefore 
be able to decide if C has a solution, contradicting the known 
unsolvability of Post's Correspondence Problem. 

□ 
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4.4 Undecidability of Equivalence for Conditional-Free Schemas. 

In this section we describe how a conditional-free, restricted 
location schema may be constructed from an arbitrary Modified Post 
Correspondence Problem in such a way that some execution of the schema 
terminates if and only if the correspondence problem has a solution. 

Let C be an arbitrary Post Correspondence Problem as defined in 
Section 4.2, and let C = (C,X) be a modified correspondence problem, 
where X is an integer between 1 and k, inclusive. We begin by modifying 
some of the subschemas of the preceding section: 

We note first that the schema S Q is equivalent to the conditional- 
free schema: 

UNTIL p Q (x) DO S E 



WHILE Pl (x) DO S £ 



Similarly, the schema S is equivalent to: 

UNTIL p (x) DO S_ 
1 E 

WHILE p (x) DO S E 

For each i, the subschema A w consists of assignment statements 

and conditional statements of the form: 

IF q(x) THEN S ELSE S 
s i. t 
J 
Clearly, we may replace each such conditional statement with the 

statement : 

UNTIL q(x) DO S_ 
E 

followed by the sequence of statements which makes up the program of the 
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subschema S g . Hence, each such schema A u can be transformed into 

a conditional -free schema. In a similar manner, each subschema of the 

form B can be transformed into a conditional-free schema. 
r 1 

For each i, 1 £ i £ k, let D. be the schema consisting of the 

statements of the schema A w , followed by the statements of the schema 

i 
B Y , followed by the statement: 

z ♦- f(z) 

Each D, can be made conditional-free by using the conditional-free 

schemas equivalent to A u and B Y . 

i i 



Let R be the schema 

WHILE t (z) DO D 1 
WHILE t 2 (z) DO D 2 



WHILE t, (z) DO D 
k k 

Finally, let S' be the schema: 

y ♦" x 

a 

WHILE p (z) DO R 
WHILE q(x) DO S E 

WHILE q(y) DO S_ 

E 

where a is the sequence of statements which makes up the schema A u 
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and is the sequence of statements which makes up the schema Bo . 
Since each of the component schemas of S 1 is equivalent to a 
conditional-free schema, S' may certainly be made conditional-free. 
The reader may verify that some execution of S 1 defined by a free 
interpretation for the schema terminates if and only if the problem 
C has a solution. (The argument is virtually identical to that 
given in the previous section. ) 

Thus we have: 

Theorem 4.2 : 

The equivalence problem for restricted location, conditional-free schemas 

is unsolvable. 

Proof : The decidability of equivalence for such schemas implies the 
solvability of the Modified Post's Correspondence Problem. 

□ 

4.5 Discussion. 

The schemas of Theorem 4.2 are a rather restricted class of monadic 
program schemas, more restricted than any class for which the equivalence 
problem has previously been shown unsolvable. This is not actually 
surprising, however, since the effort which has been expended in the 
study of equivalence problems for schematized models has been directed 
primarily towards finding broad classes of such models for which 
equivalence jLs decidable, rather than restricted classes for which it is 
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not . The paucity of results which have been obtained to date, however, 
suggests that perhaps both directions should be explored, if only to 
gain some insight into the types of restrictions which are apt to lead 
to solvable problems. 

In a modest way Theorem 4.2 provides us with some such insight, 
since it demonstrates that structure, or the lack thereof, is not in 
itself a key to equivalence problems in monadic program schemas. We are 
led to inquire, therefore, whether structure, taken in conjunction with 
other reasonable restrictions, might lead to solvable problems, or 
alternatively whether the constructions of the previous sections can be 
strengthened to yield results analogous to that of Theorem 4.2 for yet 
more restricted classes of schemas. 

For example, what is the effect of restricting the number of 
distinct symbols in the schemas? The schemas in the construction of 
Section 4.4 employ only a single function symbol, but arbitrarily many 
predicate symbols. At the cost of some lucidity, however, we could 
present a construction involving schemas with a single function symbol 
and a single predicate symbol (see Appendix A), and thus restricting 
the number of predicate and function symbols helps us little in our 
quest for solvable problems, even if dealing with totally structured 
schemas. Matters are slightly different with respect to variable 
symbols, however: while it is an easy matter to present a construction 
employing only two variable symbols (we merely use x or y in place of z), 
no further reduction is possible in the construction, since the 



^^i^a^,^ 
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equivalence problem for schemes with a single variable symbol reduces 
to that for finite state automata. 

Prompted in part by interesting results for certain interpreted 
models for computation [17,28], we might ask about the effect of 
limiting the number of levels of iteration in structured schema s. We 
.note, for instance, that the construction of Section 4.3 employs schema a 
with two levels of iteration, while that of Section 4.4 employs schemes 
with three levels. Is equivalence decidable for structured schemes with 
one level of iteration? Is equivalence decidable for conditional-free 
schema 8 with two levels of iteration? (Both of these questions are 
open. It JjS known, however, that equivalence is decidable for 
conditional- free schemes with a single level of iteration, since these 
schemes are a subclass of the "unnested loop" schemes of Paterson [18].) 

Other restrictions we consider follow from the observations that 
the schemas in the previous sections are not free; that they are- properly 
restricted location, as opposed to independent location; and that certain 
predicate letters appear in several statements in the schemas. We might 
ask, therefore: 

Is equivalence decidable for such schemes wijieb^are, free? Which are 
independent location schemas? Which are single appearance schemas? Which 
possess various combinations of these properties? 

Answers to some of these questions are presented in the following 
chapter. 
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CHAPTER V: SOLVABLE PBOB&EMS 

In this chapter we provide affinitive answers to some of the 
questions raised at the end of Chapter IV. The techniques we employ 
are hardly generalisable to non- structured schemes, but we are confident 
that they are applicable to classes of structured schema s more general 
than those we consider in this chapter. We are concerned, therefore, 
with illustrating these techniques as well as with obtaining specific 
results. (The first case we consider, for example, is perhaps rather 
more pedantic than theoretically interesting.) 

Briefly, the approach is as follows: 

We demonstrate that for certain classes of schemes it is possible 
to find iteration statements in pairs of equivalent schemes which play 
similar roles during consistent schema eaoecutions, !.•«• statements which 
execute the same number of times and test the same values during such 
executions, and which affect in a similar manner the variable symbols in 
each schema. Given an arbitrary pair of schema s in the class, we 
Identify statements which must be so related If the schema s are equivalent, 
and use their assumed similarity to reduce the equivalence of the schema a 
to that of simpler schemes, a procedure which is applied recursively 
until the problem has been reduced to that for schema* whose equivalence 
is trivially decidable. 

The approach is illustrated in Section 5.5, after formalizing the 
notion of "similar roles" and presenting some preliminary results. 
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5.1 Test Sequences and Logic Equivalence. 

Let S be an iteration schema with predicate symbols P, and let D 
be the domain of the free interpretations for S. Then the set of tests 
for S is the set D X P. 

Suppose that s is a conditional or iteration statement in S and 
that E is a free execution of S (that is, an execution defined by a free 
interpretation for S). Then a test T = (6,p) is said to be made a£ £ 
duri,qg E if the predicate assigned to symbol p by the interpretation 
defining E is evaluated at the expression 6 during the execution of 
statement s. (The application must be made during the execution of the 
statement itself, rather than during the execution of the subschema 
appearing in the statement.) We denote by TESTS(s.E) the sequence of 
tests made at s during E, and by TESTS*(S.E) the sequence of all tests 
made during E (including those made during the execution of statements 
in subschemas of S). 

Let E and E 1 be executions of iteration schemas S and S*, 
respectively. We say that E and E* are consistent if they are defined 
by consistent interpretations for the schemas. Let s be a conditional 
or iteration statement in S, and let s 1 be a conditional or iteration 
statement in S'. Then s and s* are logic equivalent if TESTS(s,E) » 
TESTS(s',E*) whenever E and E' are finite, consistent executions. 

Later in this chapter we show that for certain classes of schemas 
logic equivalent statements must appear in equivalent members of the 
classes. In fact, the existence of such statements forms the basis of 
our proofs of the decidability of equivalence for these classes. 
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5.2 Productivity and Essentiality. 

It would be naive to assume that equivalent schema s need make 
precisely the same tests during consistent executions, since some of 
the tests made during the executions may be non - productive tests — 
that is, tests whose outcomes do not affect the resultant values of the 
schema s. For example, the value of the schema in Fig. 9 for any execution 
is independent of the outcome of the test made at the statement labelled s. 
Since s is the only statement in which symbol q appears, it is clear that 
no test of the form (6,q) made during an execution of S can be productive. 
Hence, the value of S will be the same for any pair of interpretations 
for the schema which differ in the way they interpret q, and we say, 
therefore, that q is an inessential symbol of S. 

As might be expected, it is undecidable in general whether a given 
predicate symbol is essential in an iteration schema. In particular, if 
it were decidable we could easily decide whether or not arbitrary 
iteration schema s S and S were equivalent: they would be equivalent if 
and only if p were inessential in the schema 

IF p(x) THEN S 1 ELSE S 

where p is a predicate symbol not appearing in S, or S , and x is an 
arbitrary variable symbol. 

Fortunately, the fact that essentiality is not decidable does not 
preclude us from using the notion to advantage, since essentiality is 
assured for symbols of particular interest to us later in the chapter. 
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S = ({x,y}, {f,g}, {q}, [S l3 S 2 },$>) 
where (y is: 



x *- y 



s: IF q(x) THEN S ELSE S 2 



y - f(y) 

5 1 = <{x,y}, {f,g}, 0, O, 5^) 
where [j i is: 

x <- f(x) 
x - g(x) 
y «- f(x) 

5 2 = <£x,y}, {f,g}, 0, 0, & 2 ) 
where (y is: 

y - f(y) 
x «- y 
x - g(x) 

y ♦- x 
y - f(y) 



FIGURE 9. Schema With Inessential Predicate Symbol. 
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5.3 Additional Definitions and Terminology. 
5.3.1 Definitions. 

Let S be an iteration schema and let k be the maximum number of 
distinct iteration statements executed during any execution of S. Then 
we say that S is a schema of size k. (While this notion of size is 
certainly not the most intuitive, it shall prove quite useful in 
subsequent discussions.) 

Let t be a test for an iteration schema S, and let E be a free 
execution of S. Then T is free with respect to E if T £ TESTS*(S,E). 
(Intuitively, a test is free with respect to an execution if the outcome 
of the test is not fixed by the execution.) 

Let S be an iteration schema. Then the set of main statements of S 
is defined recursively as follows: 

(i) If s is a statement in the program of S, then s is a main 
statement of S. 

(ii) If s is a main conditional statement of S and s' is a statement 
in the program of the true or false subschema of s, then s 1 is a main 
statement of S. 

Let s be a conditional or iteration statement in a schema S. A 
variable is said to be modified at s if, for some execution of the schema, 
the value associated with its symbol immediately prior to an execution of 
s is different from that associated with the symbol immediately following 
the execution of s. A variable is said to be active in s if it is the 
test variable of s, or it is the test variable of some statement in the 
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subschema(s) appearing in s; otherwise, the variable is said to be 
passive in s. 

5.3.2 A Note on Terminology. 

We shall often want to modify schema interpretations in such a way 
as to obtain executions differing in some respect from those defined by 
the original interpretations. For convenience, we shall generally 
express such modifications in terms qf the executions themselves, rather 
than in terms of the defining interpretations. In particular, we shall 
often refer to obtaining a new execution from sane given execution by 
changing the outcomes of particular tests, whereas what is actually 
meant is that we may obtain the new execution by changing appropriately 
the interpretation defining the original. 
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5.4 The Elimination Theorem. 

In [24], Rodriguez studied the equivalence problem for program 
graphs , a schematized model for parallel computation, and proposed 
that one might decide t*e eojaivalence of a pair of such graph* by 
eaomaining their behavior fee consistent rb^^aottcutioas, eaecutions 
in which no cycle of either graph is executed move than once. 
Unfortunately, the proposed approach will iaot work if applied to our 
models: it is aa easy taak *o construct ...a : fpaifc ef'-vifceratetea schemes 
which are not equivalent, but which have the aaae value far all 
consistent executions in which the had^i of no itaawtion atatemeat is 
executed more than ©ace. 

For ejcuaple, let S be the schema 

x «- f (x) 

WHILE p<x) DO S l 

x «- f<x) 

x - f (x) 

WHILE p(x) DO S 

where S is the schema *x •- f(x)', and let S' be the schema 

x «- f (x) 

x «- f (x) 

UNTIL p(x) DO S 

x - f (x) 

WHILE p(x) DO S ± 
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The reader may verify that S and S' have the same value for all 
pairs of consistent executions in which no instance of S., is executed 
more than once. But S and S 1 are clearly not equivalent, since if I is 
the free interpretation which assigns to p the predicate II defined as 
follows: 

V fi ' A x } = iaisa» o * i s.4 
yf 1 -^) -iaj£, i >4 

then the execution of S defined by I terminates, while that of S 1 must 
certainly diverge. 

However, it jLs. possible to show that if a pair of iteration schemes 
satisfy certain conditions, then they must contain a pair of iteration 
statements such that the schema s are equivalent if and only if they have 
the same values for all consistent executions in which the bodies of 
jEhege statements are executed no more than once. This implies that we 
can decide the equivalence of such schemes by deciding the equivalence 
of two pairs of schema s which are "simpler" than the originals in the 
sense that they contain fewer iteration statements: 

(i) the schema 8 obtained from the originals by eliminating these 
particular iteration statements from their respective programs; and 

(ii) the schema s obtained from the originals by replacing these 
iteration statements with their bodies. 

Moreover, if we can ensure that the resultant pairs of schema s 
satisfy the same conditions as the original pair, we can repeatedly 
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eliminate iteration statements from successive pairs of schema s until 
we have reduced the equivalence of the original schema s to the 
equivalence of sous bounded number of pairs of schemes which contain 
no iteration statements (and for which equivalence is trivially 
decidable). Thus the conditions for which such iteration statements 
are guaranteed to exist are of considerable interest. 

The conditions are explicated in Theorem 5.1 in this section, 
after a preliminary result: 

Lemma Itl'- 

Let X, Y and Z be sets of words over some alphabet T. Let f L : X -» T 
and f : X -» T be total functions, and let f 2 : Y* -► T be a total 
function such that for each 6,c € Y* we have f 2 (6)*f2<c0 * f2(S*^)» 
Let a € X and let Y € Z, and suppose the following equalities hold: 

1. Y •« - f s (a).f 1 (a> 

2. Y-P»a= f 3 (a).f 2 (p ).f 1 <a), all P €Y 
^^ v.P.a = f^C ) .ff 2 <0 ) -f^a) , ail- P € Y*» 

Proof : We know from (1) and (2 ) that the assertion is correct if P 

is the empty string or P is an element of Y. Assume the 

assertion is correct for all P € Y 1 , £ i < j. Then 

the assertion is correct for all P € Y^ , as follows: 

Let P = P -P , P , € Y j ~ P € Y. There are three 
12 12 

cases to consider, based on the relationship of a to f±(a) 
in equality (1): 
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Case 1,. a = f ^a) 

Then y = f (a) . We have from equality (2): 

Y-P,-a = Y'f 2 ^i)' a and Y'P 2 ' a = y f 2^2^' a ' whence 

P l' P 2 = f 2 (P l ) " f 2 (P 2 ) = f 2 (P l' P 2 ) and thus 
Y-P-a = y£ 2 (P)-a 

Case 2. a = (j. - f (a), a non-empty. 
Then y\± = f (a) . We have: 
Vpt(Y-p-« = f 3 (a).f 2 ( p )-f 1 (a)) =» 

(vp-u-f 1 (a) = f 3 (a)-f 2 (p)-f 1 (a)) =» 

(vp'H = f 3 (a)-f 2 (p)) =» 

(Y-p-M- = Y - M--f 2 (p)) => 

(p-M- = |J.-f 2 (p)) ] 
Substituting P 1 and p for p yields: 

P 1 'M- = l^-fjCPp 



P 2 «n = n-f 2 (P 2 ) 



Then: 



Y-P-a = Y-p-l^-fj^Ca) 

= Y-p i -p 2 -u-f 1 (a) 

= Y'P 1 -^-f 2 (P 2 )-f 1 (a) 

= Y^'f 2 (P 1 )-f 2 (P 2 )-f 1 (a) 

= f 3 (a)-f 2 (P l -p 2 )-f l (a) 

= f 3 (a)-f 2 (p)-f i (a) 



i^C : ,<:'i^S0^^^Mi^-: 
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Case 3. '.»•<* - f (ttf , u non-empty. 

The proof for Case 3 is aimtlMX to that for Case 2 and is left 

to the reader. 

Theorem jjjj.: (Elimination Theorem) 

Let S and S' be iteration schema s with titles same variable^ ^jpbols, and let 

D be the union of t&e domains of <*»&&£»* v J»t»*i*s*i»tlsi»«, Let D* be 

the set {6J6»A X € D, x any variable .wg&pk «tf *&e schemes}* Let s and 

s' be iteration statements in the program? of & apd S', respectively, 

and suppose that for any variable symbol ..y- ©f Che schemas there exist 

total functions £ : D -» D, f : D' * &, and £ .:. B -» D', which 
"l y 2 y 3 

satisfy the following condition: 

Let E and E 1 be finite, consistent, free executions of S 
and S'. Let a, P, and y be strings #«*. that a ; is the value 
associated with y just prior to the first execution of statement s 
during E, $ * a is the value associated with y immediately following 
the last execution of s, and Y. P •« is the value associated with y 
at the conclusion of E. Let «% # ', and Y' be strings defined 
in a similar manner with E' in fierce of &< and s* in place of s. 
Then: 

1. a' ' f y (a) 

2. ?•'- f (P) 

y 2 

3. Y* - f v (a) 

3 
Suppose also that concatenation distributes over the function f y , i.e. 

suppose that f ■ (8)-f <cj) = f (6'cr), all 6,a € D 1 . 
y 2 ?2 y 2 



Ksm0m^u^>^i}^<f^f-^^^^^0i0^>f!^»M*^^^v^K' /*fip 
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Let S Q be the schema obt^^d..,fro^^ t b^ell^^t^..$^e|De9t-.;f 
from its program LetS be the schema «bj^a«4 £ f rj^n : ,S by replacing 

s with the program of the body of :.-■•» a?: |#eti ? f,'0i*o<l s *£ b « : t±te, . *Mr^ii#» 
obtained by eliminating s' in a similar manaer,,Jr om, # 1m schema. f' B ,. 

The* S is equivalent to S* if and only if, JS^ |# equivalent to S' , 
and S. is equivalent to S 1 .. , o( .,_._, 4 

Proof : From the previous iemae, it must be the <**r that S and^are 

equivalent If they "have the same %tlie1rfor ictmslsteht executions 

during which the bodier of s antf^P a*^ 1 ei^cuted "no more than 

j ■ 

once. (This ensures that the two equalities^W the lemna are 

satisfied* ) ■.■<*•#?*».• *W#t*Jldftf ca» e iJ- f ^m 1 -? if ?0 is 
equivalent to S'^, and % is equi^l^a^ t^» S 1 ^, . 

P 

Perhaps a few words about the theorem are in° order," particularly 
with regard to its applications if 

Suppose we have a pair of schemes S and S' whose programs consist 
of assignment and iteration statements only, and which have identical 
sets of variable symbols. Let b be the last ; 3ttaRBe«4^ v ^»tea«it in the 
program of S, and suppose the*e ; «*i**» *->'riMNM*£ a' -in the program of 
S 1 such that s and s' are logic equivHen^ 1 ■*«* «ny variasbla symbol x 
of S, we may divide the value ? associated with x at the conclusion 
of a finite, free execution E of S into three parts: the part generated 
prior to the executions of statement s, the part generated during the 
executions of statement s, and the part generated following the executions 
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of statement s„- (We note that the last part is a constant: since s is 
the last Iteration statement in the program of S, the last part is 
determined by the particular assignment statements following s and is 
independent of the execution we consider;.) 

Similarly, we may divide the value §' x associated with x at the 
conclusion of a consistent execution of S-* into portions generated 
prior to the executions of statement s 1 , during the executions of 
statement sV and following the executions of statement s'. 

The conditions required by the theorem for the elimination of s 
and s' are theses 

(i) The portion of §* generated during the executions of s' 
depends only on the portion of § generated during the executions of s, 
while the other portions of §' do not depend on this portion of § x . 

(ii) The portion of §* x generated during eacJi execution of s' 
depends only on the portion of ? generated during the corresponding 
execution of statement s. (Intuitively, this ensures that concatenation 
distributes over the function f 2 .) 

These requirements axe of course rather strict, but we shall show 
that for several interesting classes of schemes, the requirements must 
be satisfied by any pair of equivalent schemas. 
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5.5 Solvable Problems for Single Appearance Schemas. 

In this section we demonstrate that equivalence is decidable for 
certain classes of restricted location, single appearance schemas 
(RLSA schemas). We begin by considering the class of such schemas 
which are conditional-free. 
5.5.1 Decidability of Equivalence for Conditional-free RLSA Schemas. 

Let S be an iteration schema, and let s be an iteration statement 
in S. We say that s is a trap in S if, whenever the first element of 
TESTS(s,E) has outcome true if s is a WHILE statement or outcome false 
if s is an UNTIL statement, E is a non-terminating execution of S. 
(That is, a statement in a schema is a trap if the execution of its 
body is sufficient to guarantee the divergence of the schema ' s 
execution. ) 

While it is in general undecidable whether an iteration statement 
in an arbitrary iteration schema is a trap, it is decidable whether an 
iteration statement in a RLSA schema is a trap: 

Let S be such a schema. Clearly, S contains a trap if and only if 
it contains some iteration statement s such that the body of s contains 
no assignment statement of the form 'x «- f(x)', where x is the test 
variable of s. If such a statement exists, then it is a trap as is any 
iteration statement in its body. After being identified, any such trap 
can be removed from the schema and the schema can be re-examined for 
additional traps until all have been found. 

Of course we cannot, in general, remove traps from a schema without 
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affecting its output behavior under certain interpretations. If the 
schema is a BLSA schema, however, we can at least ensure that its traps 
take a particularly simple form: 

An iteration schema is in proper form if the body of each of its 
traps is the empty schema S_. 

We note that any BLSA schema can be effectively transformed into an 
equivalent BLSA schema in proper form. 

Lemma 5.2 : 

Let S and S' be equivalent BLSA schema s in proper form, such that neither 
schema contains main conditional statements. Let s be a main WHILE 
(UNTIL) statement in S, and let p be the predicate symbol in s. Then p 
appears in a main WHILE (UNTIL) statement in S'. 

Proof : Suppose otherwise. In particular, suppose that p appears in a 
main WHILE statement in S but does not appear in a main WHILE 
statement in S*. Let E' be the execution of S 1 in which the 
body of no iteration statement is executed, and let E be any 
consistent execution of S defined by an interpretation in which 
the predicate assigned to p is identically true . (Since no 
test of the form (6,p) is made with outcome fals e during E 1 , 
some such E surely exists.) Then E* is a terminating execution, 
while E is clearly non- terminating, contradicting the equivalence 
of S and S*. 

□ 
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Lemma 5.3 : 

Let S and S' be equivalent RLSA schemas such that neither schema contains 
main conditional statements. Then if p is a predicate symbol in a main 
trap of s, p is a predicate symbol in a main trap of S 1 . 

Proof : Since p appears in a main iteration statement in S, it must 

also appear (according to the previous lemma) in a main iteration 
statement in S 1 ; moreover, each of these statements must be WHILE 
statements or each must be UNTIL statements. Let s and s' 
denote the statements in S and S 1 , respectively, in which p 
appears. 

Let E be any finite execution of S, and let E' be a consistent 
execution of S'. Since E is finite, TESTS(s,E) must consist of a 
single element T. Clearly, f must be in TESTS(s' ,E* ), since 
we could otherwise change the outcome of r in E to obtain a 
non- terminating execution of S consistent with E 1 , contradicting 
the equivalence of S and S'. Also, t must be the first element 
of TESTS(s' ,E' ), since if it were not we could change the outcome 
of this first element to obtain a finite execution E" of S' such 
that E" is consistent with E and r is free with respect to E". 
We could then change the outcome of r in E to obtain a non- 
terminating execution of S consistent with E", again contradicting 
the equivalence of S and S'. Hence, for any pair of consistent 
finite executions by the schemas, the first test made at s must be 
the first test made at s'. 

But then s' must be a trap: 
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If not, we could surely find a finite execution E' of S 1 in 
which the body of s' is executed at least once. Since s and s 1 
are both WHILE statements or both UNTIL statements, the body of s 
must also be executed at least once during any execution E Q of S 
consistent with E* o (since the first test made at s during E Q 
must be the same as that made at s* during E' ). But since s 
is a trap, the execution E Q must be non-terminating, and we 
again contradict the equivalence of S and S*. 

D 

Let S and S' be equivalent BLSA schemas such that neither contains main 
conditional statements. Let s be a main iteration statement of S. Then 
there exists a main iteration statement s' of S' such that .»' and s are 
logic equivalent. 

Proof : If s is a trap, the result follows from the preceding lemma. 
Suppose that s is not a trap; 

Let p be the predicate symbol in s. According to Lemma 5.2, 
S* must contain a main iteration statement s' with predicate 
symbol p. If s and s' are not logic equivalent, there must 
exist finite, consistent, free executions E of S and E* of S 1 
such that TESTS(s,E) jt TESTS<s , ,E' ), and we can surely find such 
sequences for which all but the last elements of the sequences are 
the same. Let T be the last element of TESTS(s,E) and let t* be 
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the last element of TESTS(s' ,E ! ). The first component of one of 
the tests, say r, is at least as long as the first component of 
the other. We need only change the outcome of t to true if s is 
a WHILE statement, or to false if s is an UNTIL statement, and 
provide the same outcome for each subsequent test made at s to 
obtain a non- terminating execution of S. But since all of 
these tests must be free with respect to E', the execution is 
consistent with E 1 , contradicting the equivalence of S and S*. 

□ 

Lemma 5.5 : 

Let S and S' be equivalent, conditional- free, RLSA schema s in proper 

form. Let s be any main iteration statement of S, and let R be the 

body of s. Let s' be the iteration statement in S 1 logic equivalent 

to s, and let R 1 be the body of s'. Then every predicate symbol in 

a main iteration statement of R is in some main iteration statement of 

R 1 . 

Proof: Let S be the schema obtained from S by replacing s with the 
program of R, and let S'i be the schema obtained from S' by 
replacing s' with the program of R' . Since s and s 1 are logic 
equivalent, S and S' must be equivalent schemas. -Lemma 5.2 
ensures, therefore, that each predicate symbol which appears in 
a main iteration statement of S-^ must appear in a main iteration 
statement of S^, and the result follows immediately. 

□ 
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We are now in a position to prove the following rather intuitive 
result: 

Let S and S* be equivalent, conditional- free, RLSA schemes in proper 
form. Then each iteration statement in S is logic equivalent to some 
iteration statement in S'. 

Proof : For simplicity, we assume that S and S' have only two levels of 
iteration: the obvious generalization is left to the reader. 

Let s be a main iteration statement of S, and let R be its 
body. Let a* be the main iteration statement of S' which is 
logic equivalent to s, and let R 1 be the body of s'. Lemma 5.5 
ensures that for each main iteration statement r of R, there is 
a main iteration statement r' of I' containing the same predicate 
symbol. 

Let S, and S'^ be the schemas constructed as in the proof of 
Lemma 5.5. According to Lemma 5.4, r and r 1 must be logic 
equivalent statements in these schemes, implying that precisely 
the same tests are made at each statement during the first 
executions of R and R' in any pair of finite* consistent, free 
executions of S and S'. 

Let &2 k® tbe schema obtained from S by replacing s with two 
copies of the program of R, and let S'* be obtained similarly 
from S'. From the preceding argument, we have that the first 
instance in S 2 of each main iteration statement of R must be logic 
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equivalent to the first instance in S' 2 of the statement 
containing the same predicate symbol. Hence, we may change 
the predicate symbol in each such pair of statements to some 
new symbol which does not appear elsewhere in the schemas, 
without affecting the equivalence of S_ and S' 2# Since the 
resultant schemas are single appearance schemas, we can apply 
Lemma 5.4 to demonstrate that the second occurance in S of the 
statement r is logic equivalent to the second occurance in S^ 
of statement r 1 , implying that the same tests are made at r and 
r' during the first and second executions of R and R' in any 
pair of finite, consistent, free executions of S and S*. 

For any n > 0, we need only apply this argument n times 
to demonstrate that, for such executions, the same tests are 
made at r and r' during the first n executions of R and R' ; 
hence, r and r' are logic equivalent. 

□ 

An immediate consequence of the lemma is that predicate symbols 
of such schemas S and S 1 must be similarly "nested" in each schema, i.e. 
if symbol p is in the body of the statement in S containing symbol q, 
then p must be in the body of the statement in S' containing q. 

Suppose we wish to decide the equivalence of RLSA schemas S and S 1 , 
and suppose neither schema contains main conditional statements. From a 
previous lemma, we know that if S contains a main trap which has predicate 
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symbol p ami test variable x, then S* can be equivalent to S only if S 1 
contains a similar main trap. Suppose that this is the case: 

Let S be the schema obtained from S by adding a new variable symbol 
v to the schema and following each statement of the form 

x - f (x) 

in the portion of S preceding the trap with the statement 

v p - f (v p ) 

and then deleting the trap. (Intuitively, v_ is used during an execution 

of S to "record" the value of x which would have been tested at the 
P 

trap during the corresponding execution of S.) Let S* be the schema 
obtained in a similar manner from S'. 

We know from the proof of Lemma 5.3 that if 8 and S* are equivalent, 
the value tested at the trap in S must be the same as that tested at the 
trap in S* during any pair of consistent, finite executions of the 
schemas. Hence, S and S 1 are equivalent if and only if S and S* are 
equivalent, and it is clear that by repeating the construction for each 
corresponding pair of traps in the schemas, we can reduce the equivalence 
problem for S and S' to that for similar schemas which have no main 
traps. 

Lemma 5 , . 7 : 

Let S and S 1 be conditional-free KLSA schemas, and let k > be the 
maximum of their sizes. Then we may construct from S and S' two pairs 
of conditional- free KLSA. schemas of size no greater than k-1, such that 
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S and S' are equivalent if and only if each of the pairs comprises 
equivalent schema s. 

Proof : We may assume that S and S 1 have the same variable symbols and 
that their predicate symbols are similarly nested, otherwise we 
can immediately conclude that they are not equivalent. Without 
loss of generality, we may also assume that the schema s are 
without main traps. 

Let s be the last iteration statement in the program of S, 

and let s 1 be the statement in S' containing the same predicate 

symbol as s. Let S„, S' S , and S' be the schemas constructed 
J 0' 0' l 1 

from S and S 1 as in the proof of Theorem 5.1, and suppose that 
S is equivalent to S* and S is equivalent to S 1 : 

Every statement which follows s' in S' must be logic 
equivalent in S 1 to a corresponding statement in S , and must 
be logic equivalent in S 1 ^ to the same statement in S . Clearly, 
this can be the case only if each variable modified at s' is 
passive in all statements in S* which follow s'. Now, let E and 
E 1 be arbitrary consistent, finite, free executions of S and S', 
and let x be any variable symbol of the schemas: 

We may write the value associated with x at the conclusion 
of E as Y« P* a , where Q! is the value associated with x just 
prior to the first execution of statement s, P • a is the value 
associated with x immediately following the last execution of 
statement s, and Y is the fixed portion of the value due to the 
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assignment statements affecting x which follow statement s in 
the schema. We may write the value associated with x at the 
conclusion of E* as Y'-P'-a*, where a' , p», and y' are 
defined in a manner similar to that above, although y' is 
not fixed but rather depends in general on the particular 
execution £' being considered. Since each variable modified at 
s' Is passive in all statements following s', it must be the 
case that Y-<* ■ T^a' , and thus that Y' and a' are 
completely determined by ct* Also, it must be the case that 
P* is completely determined by P since every test made during 
an execution of the body of s must also be made during the 
corresponding execution of the body of s*, else by Lemma 5.6 
we contradict the equivalence of S. and S' . 

Thus, there must exist functions £_ , f , and f„ such that 

x l *2 X3 

for all executions E and E' as above, a* « f x (a), p ' - f x (p ), 
and Y* * f_ («). As noted above, the portion of P' due to a 
particular execution of s' during E* depends only on that portion 
of p due to the corresponding execution of s during E, and hence 
concatenation distributes over f v . The lemma then follows from 
the Elimination Theorem: 

S and S 1 are equivalent if and only if S_ and S'-, and S and 
S' are pairwise equivalent. 

D 
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Thus we have: 

Theorem 5.2 : 

Let S and S 1 be conditional-free KLSA schema s. Then it is decidable 

whether S and S 1 are equivalent. 

Proof : We note that equivalence is trivially decidable for schemas of 
size 0. The theorem follows immediately from the previous 
lemma by induction on the maximum of the sizes of S and S 1 . 

D 



Theorem 5.2 can hardly be considered a surprising result, and the 
reader will no doubt have observed that there are rather more direct 
approaches to this particular problem than that which we have presented. 
(In particular, Lemma 5.6 can be proved fairly simply without utilizing 
Lemmas 5.4 and 5.5, although our efforts are hardly wasted since these 
lemmas are needed in the next section. ) 

The proof presented, however, illustrates the major steps in the 
proofs of our other cases: 

(i) The transformation of schemas into a form facilitating the 
identification of logic equivalent statements. 

(ii) The demonstration that such statements exist in pairs of 
equivalent schemas. 

(iii) The application of the Elimination Theorem to reduce the 
equivalence of a pair of schemas to that of "smaller" schemas. 
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In the present case, all three steps are relatively straightforward. 
In the next case, however, step (i) is complicated by the presence of 
conditional statements in the schemas, while in the third case steps 
(ii) and (iii) are complicated by the multiple appearance of predicate 
symbols. The major steps, however, are the same in each proof. 
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5.5.2 Decidability of Equivalence for FKLSA Schemas. 

In this section we demonstrate that equivalence is decidable for 
the class of free, restricted location, single appearance schemas 
(FKLSA schemas). 

We begin by showing that essentiality is decidable in such schemas: 

Lemma 5.8 : 

Let S be an FKLSA schema. Then for each predicate symbol p in S, it is 

decidable whether or not p is essential. 

Proof : Since the schema is free, it is clear that p is an essential 
symbol if it appears in an iteration statement in S. Suppose, 
therefore, that p appears in a conditional statement. We claim 
that p is essential if and only if the true and false subschemas 
of this statement are not equivalent: 

Let s be the conditional statement, and suppose that its 
subschemas are not equivalent. Then we can find partial executions 
E fc and E^ of S such that the executions end immediately after the 
first execution of a subschema of s, the executions conflict only 
with respect to the outcome of the test made at s, and the value 
associated with some variable symbol x of S is different at the 
end of each of the executions. We complete the execution E. in 
such a way that the outcome of each test subsequently made at a 
WHILE statement is false , the outcome of each test subsequently 
made at an UNTIL statement is true , and the outcome of each test 
subsequently made at a conditional statement is, say, true in each 
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case. We complete the execution E f in a similar manner. Since S 
is a single appearance schema, these complete executions conflict 
only with respect to the outcome of the test made at s. But since 
precisely the same sequence of statements is executed afters in 
each ease, the value of x at the end of the executions must still 
be different. Hence, p is an essential symbol if and only if the 
subschemas of s are not equivalent. 

But it is clearly decidable whether the si&sebemaa of a are 
equivalent: 

If either subschema contains an iteration statement, the 
subschemas cannot be equivalent since the other subschema 
cannot contain an iteration statement with the same predicate 
symbol. If neither subschema contains an iteration statement, 
their equivalence is trivially decidable since there are only a 
finite number of distinct free executions of the schema s. 

Hence, it is decidable whether p is essential. 

■•■''■ □ 

We say that a schema is reduced if it contains no inessential 
symbols. We note that a conditional statement containing an 
inessential symbol may be replaced in a schema with the program 
of either of its subschemas, and thus we have: 
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Corollary 5.9 ; 

Let S be a FBLSA schema. Then we may construct from S a reduced FRLSA 

schema equivalent to S. 



It may be worth mentioning here that the decision not to permit 
the designation of certain schema .variables as "output" variables is 
rewarded with the relative simplicity of the proof of Lemma 5.8. 
While the result is still true for schemas with specified output 
variables (it was established by the author in [22] for a class of 
schemas somewhat more general that the FRLSA schemas), the proof 
becomes rather complex in that case, since we must show that the final 
value of some output variable, rather than some arbitrary variable, is 
dependent on the outcome of a test made at a conditional statement. 
Since this dependency may be quite indirect, the decision procedure for 
such schemas is quite complicated. 

We use some of the results of the previous section to prove the 
following lemma: 

Lemma 5.10 ; 

Let S and S 1 be reduced, equivalent FRLSA schemas. Then predicate symbol 
p appears in a conditional /WHILE/UNTIL statement in S if and only if it 
appears in a conditional/WHILE/UNTIL statement in S'. Moreover, for each 
iteration statement in S there is a logic equivalent iteration statement 
in S 1 , and if s and s 1 are such iteration statements, the sets of 
predicate symbols appearing in their schemas are the same. 
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Proof : Suppose that predicate symbol p appears in a main conditional 

statement s of S. Since p is an essential symbol, it must appear 
in some statement s 1 in S'. Moreover, a' must be a conditional 
statement: 

Suppose otherwise. In particular, suppose that s' is a 
WHILE statement. Let S Q be the schema obtained from S by 
replacing s with the program of its true subschema, and let S 1 ^ 
be the "schema" obtained from S 1 by replacing s* with infinitely 
many copies of its body. S Q must be equivalent to S' M , but since 
S' is free, at least one of its variables (namely the test 
variable of s') is modified at s', and thus S cannot be 
equivalent to S'^. Hence, s* must be a conditional statement. 
We note also that since p is essential, a productive test may be 
made at s' each time it is executed. If S and S' are to be 
equivalent, therefore, s* must be a main conditional statement 
of S\ 

We are thus assured that for each main conditional statement 
in S, there is a main conditional statement in S' with the same 
predicate symbol. Let S and S f be the schema s obtained 
from S by replacing each main conditional statement with the 
program of its true subschema and its false subschema, 
respectively. Let S 1 and S' be obtained in a similar manner 
from S'. Clearly, S t must be equivalent to S' and S must be 
equivalent to S' . Applying Lemmas 5.2 and 5.4 to each pair of 
schema s, we establish the desired result for the symbols occuring 
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in main statements of the schema. We need only employ the 
methods of Lemmas 5.5 and 5.6 to establish the result for all 
symbols. 

□ 

Again, the preceding result is highly intuitive. We note, 
however, that the result is hardly less intuitive, though demonstrably 
false, if we remove the restriction of freeness from the schemas. 

We now show that a "weak" form of logic equivalence must hold 
between certain main conditional statements of equivalent, reduced, FRLSA 
schemas. The following definition is useful: 

Let r be a main conditional statement in an iteration schema S. 
Then r is a final main conditional statement if, whenever r is executed 
during an execution of S, no main conditional is executed after r. 

Lemma 5.11 : 

Let S and S 1 be equivalent, reduced, FRLSA. schemas, and let r be a final 
main conditional statement of S. Let E and E 1 be consistent, finite, 
free executions of S and S', respectively. Then a test T is made at r 
during E only if T is made during E 1 . 

Proof : Suppose that such a test is made during E. If either subschema 
of r contains an iteration statement s, then from Lemma 5.10 
s can execute during E only if the statement logic equivalent to 
s executes during E'. Hence, T cannot be free with respect to E'. 

Suppose that neither subschema of r contains an iteration 
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statement, i.e. suppose that both subschemas axe composed solely 
of assignment statements. Let x be the test variable of r, and 
let r* denote the main conditional in S' containing the same 
predicate symbol as r. Since S and S 1 are equivalent and reduced, 
the test variable of r 1 must also be x and no iteration statement 
which modifies x can precede r 1 in the program of S* unless its 
logic equivalent counterpart precedes r in the program of S. 

Let E Q be the execution obtained from E by choosing outcome 
falaft fox each test made at a MILE statement after the execution 
of r, and outcome true for each test made at an BUHL 
statement; let E' be a consistent execution of S'. The test 
r is made during E , and since the predicate symbol in r is 
essential and the subschemas of r consist solely of assignment 
statements, the value associated with some variable symbol y after 
the execution of r during E must depend on the outcome of T. 
Also, since an assignment statement is executed after the 
execution of r in E just if the assignment statement is a main 
statement of S, the value associated with y at the conclug^ on 
of E Q must also depend on the outcome of T. Since S and S' are 
equivalent schema s, test r must be made during E' and hence 
during E». 

D 
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We may apply the lemma recursively to a pair of such schemas S and S 1 
to obtain: 

Corollary 5.12 ; 

Let S and S 1 be as in Lemma 5.11. Let s be a main conditional of S, 
and let s 1 be the main conditional of S' with the same predicate symbol. 
Then during any pair of finite, consistent, free executions of S and S 1 , 
either no test is made at s or s', or the same test is made at both 
statements. _/ 

A consequence of the corollary is that the equivalence problem for 
FKLSA schemas reduces to that for FKLSA schemas with no main conditional 
statements: 

Let S and S 1 be reduced FKLSA schemas, and suppose that for each 
main conditional in S there is a main conditional in S' with the same 
predicate symbol and test variable. (If such is not the case, we may 
conclude from Lemma 5.10 that S and S 1 are not equivalent.) Let r be a 
final main conditional of S, and let r* be the corresponding main 
conditional of S*. We construct from S and S' a pair of schemas S Q and 
S' as follows: 

We add a new variable symbol x r to each schema to record the 
values tested at r and r 1 during executions of the schemas, in the 
same manner as when eliminating main traps from the schemas of Section 
5.5.1. If r is in a subschema of some other main conditional of S, we 
replace this conditional with the program of the subschema and replace 
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the corresponding conditional in S' with the jjrcgram of its corresponding 

subschema. This is repeated until r is no longer in a subschema of a, main 

conditional of S, and then r and r* are replaced with the programs of one 

of their subschemas, say their true subschemas. T^M resultant schema s are 

S and S' . 
° 

We construct a second pair of schemes Sg. and S' t from S and S* 
by replacing r and r' with the programs of their true subschemas, and 
reducing the resultant schemes; a third pair of schemes S f and S'^ are 
constructed in a similar manner, replacing r and r* with the programs of 
their false subschemas. 

Intuitively, the equivalence of S Q and S'; eosures that a teats 
made at r during an execution of S must also be made at r' during any 
consistent execution of,S', rt 0f course^ this j^s^peaag r; ti»t -no test 
made at a conditional statement of 5 whose s ub s che ma contains r will iiave 
an outcome different from that of t3^ } ..4i00^ : ,jfia^^% : ,4S:q,4!^^a^^^ ia S', 
but from Coroilary & T 12, this is the case if & is e^uivaJLent to S*^, 
and S f is equivalent to S' f . Hence ef %.§pAS\,Jtw%.^l^y^yB^ : iS and ; 
only if S Q and S'^ S t and S'^, and S £ and &* if , ,aj» pairwise equivalent. 
Since each of these schema s contains at least one fewer main conditional 
than S and S", the constructions may be repealed i to reduce the equivalence 
of S and S 1 to that of a finite number of paira of schemes without main 
conditionals. 

The proof of the following lemma is virtually identical to that of 
Lemma 5.7 and is left to the reader: 



.'jv^^l^l^^^^''^^:^--? 
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Lemma 5.13 : 

Let S and S* be FKLSA schema s without main conditionals, and let k > 
be the maximum of their sizes. Then we may construct from S and S* 
two pairs of FKLSA schema s of size no greater than k-1, such that S and 
S* are equivalent if and only if each of the pairs comprises equivalent 
schema s. __/ 

We have observed that the equivalence of a pair of FKLSA schema s 
can be reduced to that of a finite number of pairs of FKLSA schemes 
without main conditionals. We note that the latter schema s are 
of the same size as the originals, and thus we have: 

Theorem 5.3 : 

Let S and S 1 be FKLSA schemes. Ifcen it is deeidable if S and S* are 

equivalent. 

Proof : From the previous lemma, by induction on the size of S and S'. 

D ' 
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5.6 Decidability of Equivalence for FILCF Schema s. 

In the previous section we dealt with schema s in which predicate 
symbols appeared only once. Finding logic equivalent statements in 
equivalent schemes was quite easy, therefore, because we knew precisely 
which pairs of statements to examine — those containing the same 
predicate symbols. 

In this section we consider the equivalence problem for free, 
independent location, conditional- free schema s (FIL CF schema s). As 
might be expected, the proof that logic equivalent statements exist in 
equivalent pairs of such schema s is not quite as trivial as it was in 
the previous cases: 

Lemma 5 f 14 : 

Let S and S' be FILCF schema e, and let s fee the last iteration statement 
in the program of S. Then if S and S 1 are equivalent, there exists a 
statement e* in the program of S' such that a~ and «' are logic equivalent. 
Proof : Suppose that S and S* are equivalent. Let E be a free execution 
of S such that TESTS(s,E) contains infinitely many elements, and 
let E 1 be a consistent execution of S'. (We note that since E 
is non- terminating and S and S' are equivalent schemes, E' must 
be a non- terminating execution.) Clearly, every element of 
TESTS(s,E) must be an element of TESTS*(S' ,E' ), since if some 
T € TESTS(s,E) were not in TESTS*(S* ,E' ), we could change the 
outcome of t during E to obtain a terminating execution of S 
consistent with the non- terminating execution E', contradicting 
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the equivalence of S and S 1 . Also, all but finitely many of 
the elements of TESTS(s,E) must be in TESTS(s',E') for some 
statement s' in S': 

Suppose otherwise. Then there must exist statements s^ 
and s 2 in schema S' such that TESTSCspE 1 ) and TESTS(s 2 ,E') 
each contain infinitely many elements of TESTS(s,E). (For 
simplicity we shall assume that s., and s 2 are the only such 
statements.) It must be the case that one of the statements, 
say s 2 , is in the body of the other. Let T be any test in 
TESTS(s,E) fl TESTS(s ,E'). If we change the outcome of T 
during E, we obtain a terminating execution E" of S; also, 
since S is an independent location schema, no value which 
is longer than the first component of T and ends with the 
same symbol is tested during E". Suppose we also change the 
outcome of T during execution E': the first test made at 
statement s-. after T is made at s 2 must be free with respect to 
E" since the value tested must be longer that that tested in t 
and must end with the same symbol. If s^ is a WHILE statement, 
we choose the outcome of this test to be true , as we do for each 
subsequent test made at s-, (each of which must also be free with 
respect to E"). If s± is an UNTIL statement, we choose a 
succession of false outcomes. In either case, the resultant 
execution is consistent with E" but is non- terminating, 
contradicting the equivalence of S and S 1 . Hence, there must 
exist a statement s 1 such that all but finitely many elements 
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of TESTS(s,E) are in TESTS(8 , ,E' ). 

We now show that s' must be in the program of S*: 

Let x be the test variable of statements s and a*, and 
suppose that s' is not in the program of S', i.e. suppose that 
s' is in the body of some iteration statement r Q in the program 
of S'. Clearly, no statement r which follows r in the program 
can have test variable x, otherwise we could obtain from E a 
terminating execution of S and from E 1 a consistent, 
non- terminating execution of S* by changing the outcome of 
any test T € ($ESTS(s,E) fl TESTS^'jE')) as above, using s' in 
place of s 2 and r in place of s^. Similarly, the statement r Q 
itself cannot have test variable x. Let T f be the first test 
made at r with the property that during the subsequent 
execution of r's body, some test T H € TESTS(s,E) is made at s'. 
Let E 1 be an execution of S consistent with E except for the 
outcome of test r" (if T 1 ' is made during E), and such that 
TESTS(s,E 1 ) is infinite. Let E' x be an execution of S' 
consistent with E. and consistent with the portion of E* 
preceding the execution of r , If we apply the arguments of 
the preceding paragraph, we have that there exists a statement 
s', in schema S 1 such that all but finitely many of the elements 
of TESTS(s,E 1 ) are in TESTS(s' ,E* ). Moreover, s^ must be in 
the body of some iteration statement r, which follows r_ in the 
program of S', since E and E' are the same prior to the 
execution of r., and s'^ itself cannot be in the program of S'. 
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But if we repeat this argument ad infinitum, we can shew that 
there must exist an infinite sequence of statements rg.rp^, ... 
which follcw one another in the program of S 1 , an impossibility 
since the program must be finite. Hence, the statement s* must 
be in the program of S' (and must in fact be the last iteration 
statement in the program with test variable x). 

The logic equivalence of the statements is now easily 
demonstrated: 

We note that for any pair of finite, consistent, free 
executions E Q of S and E' of S*, the last element of TESTS(s,E ) 
must be the same as the last element of TESTS(s' ,E' ). If this 
were not the case, we could change the outcome of whichever test 
had the longer first component, or either test if the components 
were of equal length, without disrupting the consistency of the 
executions. This would cause another test to be made at the 
corresponding statement and since this test, and all subsequent 
tests made at the statement, would be free with respect to the 
execution of the other schema, we could permit this execution 
to diverge while still remaining consistent with the other, thus 
contradicting the equivalence of S and S'. 

Hence, the last elements of TESTS(s,E Q ) and TESTS(s* ,E' Q ) 
must be the same for any such E q and E' . But since the schema s 
are free, this can be the case only if TESTS(s,E ) = TESTS(s' ,E' ): 

Suppose otherwise. Then there must be a test T in one of the 
sequences, say TESTS(s,E Q ), which is not in the other. Since r 
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must be made during E* o , it must be the case that T € TESTS(r,E* ) 
for some statement r whose execution precedes that of s 1 during 
E' . Let E be the execution of S conflicting with E only with 
respect to the outcome of r, and let E* be an execution of S 1 
which is consistent wit& E and is consistent with the portion 
of E' which precedes the making of test T. It must be the case 
that T 6 TB£CS<r ,'.£'' j.'),. but since r is the last element of 
TESTS(s,E ) it must also be the last element of .. 11fi3!g.<8 , ,E , 1 ), 
contradicting the freeness of S'. 

We have, therefore, that TESTS(s,E ) *-«gSWC« ,= t* l " ) for 
any pair of finite, consistent, free execut ions 'B' and E' Q , 
and thus s and s* are logic equivalent. 

□ 



Lemma 5.15 : 

Let S and S' be equivalent FXLfC scheaas of size greater than 0. Let 
s be the last iteration statement in the program of S, and let s 1 be 
the logic equivalent iteration statement in S*« Then each variable 
which is modified at s* is passive in all statements which follow s 1 
in the program of S ' . 

Proof : Suppose otherwise. In particular, suppose that a variable x is 
modified at s' and active in some statement s" which followe s 1 . 
(For simplicity, we assume that x is the only such variable and 
s" the only such statement — the generalization is tedious 
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but straightforward. ) We can assume without loss of generality 
that x is the test variable of s", for if it is instead the test 
variable of some statement in the body of s", we merely restrict 
attention in the ensuing discussions to executions of S 1 during 
which this statement is executed. 

Since x is modified at statement s 1 it is clearly the 
case that x is modified at s, since otherwise the value of x 
would be independent of the number of times s were executed 
during a free execution of S, while the value of x grows, in 
general, in proportion to the number of times the statement 
s' is executed during a free execution of S 1 . 

Also, it must be the case that x is active in 
statement s: 

Suppose otherwise. Let E and E' be consistent, 
finite, free executions of S and S' such that the value 
associated with x after the last execution of s 1 during E 1 is 
longer than that associated with x immediately prior to the 
first execution of s during E. Since we are assuming that x is 
passive in s, the first test made at s" during E 1 must be free 
with respect to E, as must any subsequent tests made at s". By 
choosing true outcomes for all of these tests, if s" is a WHILE 
statement, or false outcomes for all of these tests, if s" is 
an UNTIL statement, we obtain a non- terminating execution of 
S' consistent with E, which contradicts the equivalence of S 
and S 1 . Hence, x must be active in s. But then s must also 
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be active in V: 

Suppose otherwise. Let R be the body of s, and let s 
be a statement with test variable x in R. Let fc x be a free 
execution of S in which s x is executed infinitely often 
daring the first execution of R. Let f* be an execution of 
S' consistent with E in which the body of s* is executed 
exactly twice. Since S and S* ate equivalent schema s, E' 
oust fcea non- terminating ^xectrttoii. ;:: 'ln "*act> 'tt must be the 
case tiMtt 3&STS(s ,f ,E' x ) is iaf taftfe and that ail but finitely 
many «f its elements -m» in ^BSIS^§ X ,E X ). liet t be in 
(TESTSCs^,I x ) n a&S^S*%E' x ^)/«nd 1&fc% be an execution of 
S which is consistent with E x except for the outcome of T and 
which has the property that &* is execute Mfl&itely often 
during the second execution of & in E . Then since x is 
passive in all statements foll^wfflBtg a" in the program of S 1 , 
we can find a finite execution E* x of S'wtiich is consistent 
with E^: 

Hie execution E f x will be consistent With fe' x until the 
test t ia made. Since each statement subsequently executed 
has a test variable othejrthan x, no more than finitely many 
tests need be made at any statement before *a* ; test is made 
which is free with respect to %. We choose the outcome of 
such a test to be true if it is made at ah BHTIL statement, or 
false if it is made at a WHILE etatemeiit. the resultant 
execution is clearly terminating and is consistent with E* , 
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contradicting the equivalence of S and S 1 . Hence, x must be 
active in both s and s'. 

Let R' be the body of s', and let s 1 be a statement in R 1 
with test variable x. For simplicity, we assume that s 1 is 

X 

the only statement in R* with test variable x and that s x is 
the only statement in R with test variable x; the generaliza- 
tion is again straightforward. Let E' be a free execution of 
of S' in which s' is executed infinitely often during the 
first execution of R' , and let E be a consistent execution of 
S. No more than finitely many elements of TESTS (s x ,E) may be 
free with respect to E 1 , otherwise we may terminate the 
execution of S in a manner consistent with E', contradicting 
the equivalence of the schema s. Hence by changing the 

outcome of some test T 6 (TESTS(s v ,E) D TESTS(s* ,E' )), we 

x xx 

may obtain from E a finite execution E of S such that E is 
consistent with E except for the outcome of T, and such that 
T is the last element of TESTSCs^Ej-). Let E 1 be an execution 
of S 1 which is consistent with Ej- and is also consistent with 
the portion of E 1 prior to the making of T. We note that the 
first test made at s" during E' must be free with respect to 
E , as must each subsequent test made at s", and hence that 
E' T can be chosen so that it is finite, again contradicting 
the equivalence of S and S*. 

Thus no such variable x can exist, and each variable which 
is modified at s' must be passive in all statements which follow 
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s ' in the program of S ' . 

D 

The proof of the following lemma is again virtually identical to 
that of Lemma 5.7: 

Lemma 5.16 : 

Let S and S' he FILCF schema a, and let k > be the maximum of their 
sizes. Then we may construct from S and S 1 two pairs of FILCF schema e 
of size no greater than k-1, such that S and S' are equivalent if and 
only if each of the pairs comprises equivalent schema s. ___/ 

Finally, we have: 

Theorem 5.4 : 

Let S and S 1 be FILCF schema s. Then it is decidable whether or not 

S and S 1 are equivalent. 

Proof : From Lemma 5.16, by induction on the size of S and S 1 . 

D 
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5.7 Discussion. 

Obviously, the preceding results do not provide answers to all of 
the questions raised in Chapter IV. We conjecture, however, that 
techniques similar to those we have presented are applicable to most of 
the classes of schema s considered in the last paragraph of that chapter, 
and that equivalence is decidable for each of the classes. For certain 
of the classes, however, it is not clear that the additional efforts 
required to establish decidability results are well-spent: 

Our motive for studying the conditional- free schema s of the last 
section, for example, is that such schema s may provide a suitable basis 
for the study of structured independent location schema s in general, if 
methods can be developed to remove in some systematic manner the 
conditional statements from such schema s. It would hardly seem 
worthwhile, therefore, to expend much effort in extending Theorem 5.4 
to non-free schema s, since the equivalence problem for such schema s can 
be shown reducible to that for free schema s in which conditionals are 
permitted. Of course, it might be argued that freeness is a rather 
undesirable restriction since it is not a decidable property of iteration 
schema s, but it is fairly easy to show (see Appendix B) that freeness .is 
a decidable property of independent location schema s. 

A similar comment applies to the result for FRLSA schemas. Again, 
we hope to be able to apply the result to more general classes of schemas 
by identifying logic equivalent statements in pairs of schemas and 
suitably changing the predicate symbols in the statements. (In fact, 
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Theorem 5.4 can be derived in such a way from Theorem 5.2, although the 
proof that we have presented is somewhat more direct.) In light of the 
undecidability results in Chapter IV for restricted location schema s, 
f reeness will likely fee a necessary restriction if equivalence is to be 
decidable for these more general classes. We lose little, therefore, 
by imposing the restriction now. 

A few final words are in order about a class of schemes which does 
seem worth considering, however, and that is the class of free and 
conditional-free schemes which are restricted location, rather than 
independent location. We conjecture that Lemma 5.14 is still valid for 
such schemes, although the proof is complicated by the fact that the set 
of tests whose first components end with some given symbol Ax need not 
be made in order of increasing lengths of these components. The 
remainder of the proof for the independent location schema s is, with 
quite minor and obvious modifications, applicable to restricted location 
schema s. 
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CHAPTER VI: 

Independent location program schemas have been studied rather 
extensively (cf, [12], [16], [19]) because of the schemas 1 relative 
simplicity and because their equivalence problems are interchangable 
with those of a rather interesting class of automata, the multi-tape 
finite automata defined in [23]. In this chapter, we consider the way 
in which the equivalence problems for structured independent location 
schemas relate to those for such schemas in general, and to those for 
certain classes of the automata. 

We show that the weak equivalence problems for structured and 
non- structured independent location schemas are interchangable, and 
that both problems are in fact unsolvable. While we are not able to 
show that the equivalence problem for multi-tape automata is reducable 
to that for structured independent location schemas, we are able to 
show that the equivalence problem for multi-tape automata with a single 
control state reduces to that for such schemas, and that the strong 
equivalence problem for independent location schemas in general reduces 
to the problem of deciding whether such automata are equivalent over 
some subset of their tapes. 

6.1 Multi-Tape Finite Automata. 

Our treatment of multi-tape automata differs somewhat from that in 
[16] or [23] since we consider a rather special subclass of the automata 
in a later section, and we wish the notions developed here to be 
reasonable for this subclass. 
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Intuitively, an n-tape automaton M is a finite automaton equipped 
with n one-way scanning heads, each on its own tape. Associated with M 
is an advancement function and a transition function which determine, 
based on the current internal state of M and the tt- tuple of symbols 
being scanned, the tape heads, if any, which are to be advanced to the 
next symbol, and the internal state of M which is then entered. A 
particular state of M is designated the initial state of the automaton, 
another its accepting state, and a third its rejecting state. No 
transitions are permitted out of these last two states. 

Each input tape of M is initially inscribed with a sequence of 
symbols from some finite tape alphabet followed by a special endmarking 
symbol $, beyond which a tape head is not permitted to scan. A 
computation by H on a set of tapes begins with H in its initial state 
and each tape head positioned at the leftmost square of its tape, and 
proceeds until each head is scanning its respective endnorker, at which 
time a set of tapes is accepted if M is in its accept state or rejected 
if M is in its reject state. If M is in neither state, or if such a 
positioning of tape heads never occurs, M is said to diYftlgC on the 
tapes. 

Formally: 

An n- tape automaton is a seven- tuple 

M = (T, Q, q r q fi , q r , f, h) 

where: T is a finite set of tape symbols , including the special 
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endmarker $. 

Q is a finite set of control states . 

q_ 6 Q is the initial state of M. 

q a € Q is the accepting state of M. 

q 6 Q is the rejecting state of M. 

f : Q X T n -» Q is the state transition function , a total function 
satisfying the property that f(q = ,cp) = q a and f(q ,cp) = q , all cp € T . 

h: Q X T n -» 2^ 1 > 2 *'"* n \ where 2^ 1 ' 2 '***' n ^ denotes the power 
set of {l,2,...,n}, is the head advancement function , a total function 
satisfying the property that h(q,cp) does not contain i whenever the ith 
component of cp is $, all q € Q and cp € T . 

A configuration of M is a pair (q,A), where q is an element of Q 
and A is an n-tuple of strings in T . (For such a A, we denote by TAIL (A) 
the string of length n whose ith symbol is the last symbol of the ith 
component of A, 1 £ i £ n. ) 

A computation by M is a possibly infinite sequence of configurations 

(q 1 ,A l ),(q 2 ,A 2 ), ... , <vV>(\ +1 >\ +1 >> •" 

in which q is the initial state q-j-, A. is a tuple of single symbols, and 
for all i > 1: 

(1) q = f(q i _ 1 ,TAIL(A i _ 1 )) 

(2) A = A *S, where S is an n-tuple of symbols or nulls in T y 

i i-l 

{*•}, \ the null string, such that for all j , 1 ^ j ^ n, the jth 
component of S is \ iff j £ h(q ,TAIL(A j,)). (Concatenation is 
extended to tuples of strings in the obvious manner: if X = (6^, ... , 6^) 
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and Y = (a , ... ,a k ) are tuples of strings, then X«Y is the tuple 
(Sj^c^, ... , &k«tf k ).) 

An n-tuple of strings in T* is accepted by M if there is a finite 

computation by M ending with the configuration (q ,A-$ n ); it is rejec t ed 

by M if there is a finite computation ending with the configuration 

(q ,A. $ n ). If A is neither accepted nor rejected by M, we say that M 

diverges on A. We note that since there are a© transitions leaving 

q or q , no A may be both accepted and rejected by M. 
a r 

The ^,OTSMSfifJ«* by M > vr± t**n L(M), is the set {A | A is 

accepted by M). The laqfiuaflf ffigjefijftd by M, vritfcen L(M), is the set 

{A | A is rejected by M}. 

6.2 Equivalence Problems For Multi-Tape Automata. 

Let M and M 1 be n-tape automata, some n > Oi Then M and M' are 
strongly equivalent if L(M) - L(M') and L(M) » L(M'). M and M 1 are 
weakly equivalent if (L(M) D I(M')) - and (L(M) n L(M')) - 0, i.e. if 
no tuple of strings accepted by M is rejected by M' , and vice versa. 

Let M and M 1 be n-tape automata, and let N - {i , ...,i £ } be a set 

1 

of integers between 1 and n, inclusive. Then M and M 1 are N- restricted 

equivalent if the set {(6i,...,6«) I for some A € L(M), 6. is the i.th 

i j 

component of A, 1 ^ j s I) is equal to the set {(Sp. .., 6*) | for some 
A 6 L(M' ), 6 ± is the i.th component of A, 1 <; j £ l\, i.e. if M and M* 
accept the same tuples of strings when attention is restricted to the 
subset of their tapes designated by N. 
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6.3 "Equivalence" of Independent Location Schemas and Multi-Tape 
Finite Automata. 

Informally, we consider two models for computation to be 
equivalent if their equivalence problems are interchangable and if, 
given an element in one model, we can effectively construct an element 
in the other which simulates it in some well-defined manner. Luckham, 
Park, and Paterson have demonstrated that independent location schemas 
with n variable symbols are equivalent in this sense to finite automata 
with n tapes. The simulations are straightforward (indeed the simulation 
of the schemas by the automata is rather trivial) , but they are of no 
particular interest to us here; the reader is referred to [16] for 
details. We do note here, however, that the weak equivalence and strong 
equivalence problems for the automata correspond directly to the weak 
equivalence and strong equivalence problems for the schemas, while the 
restricted equivalence problem for the automata corresponds to the 
equivalence problem for independent location schemas with designated 
output symbols. 

6.4 Weak Simulation of Multi-Tape Automata by Structured Independent 

Location Schemas. 

It follows from the discussion in the preceding section that any 
independent location iteration schema can be simulated by some multi-tape 
automaton. In this section we demonstrate that an arbitrary multi-tape 
automaton can be "weakly" simulated by some such schema, i.e. simulated 
in such a way that each computation by the automaton corresponds to an 
execution of the schema for a suitably chosen interpretation, and each 
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terminating execution of the schema corresponds to some computation by 
the automaton. We axe tiros able to demonstrate the correspondence of 
the weak equivalence problems for ^e automata and the achamas* though 
we are not able to demonstrate a corresp on d en ce of their strong 
equivalence problems. 

6.4.1 The Simulation. 

Let M - (laj^ ,.»... r a fcr $l,. Uj.'-"' W V**** q -I* V V f ' h) be 
an n-tape automaton, for some n > 0, as defined in Section 6.1. We show 
how to construct an independent location iteration schema S which 
weakly simulates the automaton: 

S„ will have variable symbols x. ,...., x r representing the tapes of M. 
It will have an additional variable symbol y which will be used to record 
the states entered by M during a simulated computation, and also to 
record the outcome of the computation (acceptance or rejection) if the 
computation does not diverge. 

S_, will have predicate symbols p , ...,p ,p g , corresponding to the 
M Ik 9 

tape symbols of H. It will also have predicate symbols p ,...,p ,p T , 

q l %. L 
p ,p , corresponding to the states of M, and a "number of moves" symbol 
q a q r 

m 

S M will have function symbol g representing the advancement of a 

tape head, and symbols a and r denoting acceptance and rejection, 
respectively. 

For notational convenience, we provide simple representations for 
certain boolean expressions: 
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For each i, 1 £ i £ k, and each j, 1 £ j ^ n, we represent by P (x.) 

s i J 
the expression (p (x ) A (-, (p (x. ) V p (x.) V . . . V p o (x. ) 

s i j s l J S 2 J S i-1 J 

V p (x.) V ... V p (x.) V p.Cx.))). 
s i+l J S k J $ J 

Similarly, for each j, 1 ^ j ^ n, we represent by P 6 (x.) the 

v J 

expression (p (x.) A (-i(p (x.) V ... V p (x ))). 

$ J s i J . s k J 

For each i, 1 ^ i s i, we represent by P the expression (p (y) A 

i q i 

(-i(p (y) V p (y) V ... V p o (y) V p (y) V ... V p (y) V p (y) V 

q l ^2 q i-l q i+l ^m q I 

P a (y) v P (y)))> and define expressions for P n , P n , and P^ in a 

a q r 
similar manner. 



q "' r q """ r q ' q * q 

n a ^r I a ^r 



Let cp,cp,...,cp be an enumeration of the strings of 

1 2 (k+l) n n 

length n over the tape alphabet of M. Then for each j, 1 £ j ^ (k+1) , 

we represent by P 



the expression (P e (x ) A P (x->) A ... A P e (x)), 

^ \ 1 J, Jn 

where s± *s 4 • . .. *s. = cp . 

J l J 2 Jn J 
We adopt a shorthand notation for certain sequences of assignment 
instructions, as follows: 

Let N = {i , ... , i } be a set of integers between 1 and n, 

L Jv 

inclusive. Then we denote by 'x ♦- gCO* the sequences of instructions 

•x, «- g(x. )' 'x. «- g(x )'. 

1 1 I t 

The subschemas of S are as follows: 

M 

The empty schema S and the divergent schema S , as defined in 

E T 

Chapter IV. 

For each i, 1 ^ i £ (k+1) , and each j, 1 ^ j ^ m, the subschema 
S with program: 
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Xh(q j ^i )4 - 8(X h(q r cp 1 ) ) 

y *■ g(y) 

ff P f(q .q^) THEN S E ELSE S t 
For «a*h i, 1 s i £ (k+l) n , the subschema ''' S with program: 

Xh(q I* C Pi )4 * g(x h(q I ^ i ) ) 

y«- g(y) 

IF P., v THEN S_ ELSE S 

For each i, 1 < i < (k+l) n , and each j, U js m, the subschema 

R with program: 
i > J 

IF (P qj AF ?i ) THENS^ B^^.j 
For each j, 1 < j < m, the subschema R with program: 

IF (P A P ) THEN S _ T< jB. p 

q j ^(k+l) 11 (k+l) n ,j RJ£ER l,j*l 

The subschema R f _ -.n with program: 

IF (P a P ) THEN S ELSE R, T 

% <P(k+l) n (k+l) n ,m I ' 1 

For each i,l s i < (k+l) a , the subschema ■* * T with program: 
IF (p qi Ay THEN S ±fl ««l 1+l|I 

The subschema R n wi- c ^ program: 



(k+1) ,1 

p 

q i *cw-i) n (k+i) n ,i 



IF (P A P ) THEN S ELSE S. 

•" .n ,. . , v n _ T 
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The schema S„ is then: 



IF P THEN S ELSE S 
q-j- E t 

WHILE p (y) DO R 

m 1,1 

IF (PgCx^ A ... A P (x )) THEN S ELSE S f 
IF P (y) THEN 'y - a(y)' ELSE S 
IF P (y) THEN 'y ♦- r(y) ' ELSE S 



Let I be a free interpretation for S , and for each predicate 

M 

symbol p of S let II denote the predicate assigned to p by I. 

M p 

For each i, 1 <■ i £ n, let SL. be the least integer > such that 

II (g X *A ) is true , and let i be the least integer such that 

P $ i X i y 

II (g y, A ) is false . We say that I is a reasonable interpretation 
m ^ 



for Sl. if exactly one of the predicates II D ,11 , ... , IL , II n is 
^ . \ Ps 2 Pg k p $ 

true at each element of {g "A x | ^ i s 1, 1 ^ j =s n}, and exactly 

J J 

one of the predicates II , II D , . . . , II_ , IL , II D , n D is true 

P q L F q 2 q m II q a q r 
at each element of {g • A v | £ i £ & }. 

Each interpretation I which is reasonable for S defines an n-tuple 

A of strings over the alphabet of M in a straightforward manner: the ith 

symbol in the jth string, l^j ^ n, l^i^X., is symbol s if and only 

if n (g 1_ 'A x ) is true . 
P s j 

Each such interpretation I for SL, defines a sequence of states of M 
in a similar manner: the ith state in the sequence, 1 ^ i ^ JL , 

y 

is q if and only if n p (g *A y ) is true . 
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The reader may verify that S diverges under all unreasonable 
interpretations, and converges for the reasonable interpretation I if 
and only if the sequence of states defined by I is consistent with a 
non-divergent computation of M on A. If the execution of S converges, 
the symbol a or r is prefixed to the value of symbol y, according as 
the last state of M in the simulated computation is q or q . 

Thus, S weakly simulates the automaton M in the manner described 
previously. 



6.4.2 Weak Equivalence: A Reducibility. 

As noted, the schema £L, constructed in the preceding section diverges 
under all unreasonable interpretations, and diverges under reasonable 
interpretations which define input strings on which M diverges. But the 
schema may also diverge under reasonable interpretations which define 
input strings on which M does not diverge, if the sequence of states 
defined by the interpretation does not correspond to the sequence of 
states entered by M during its computation on the strings. This behavior 
is an inherent feature of the simulation, and is in fact the feature which 
makes the simulation "weak" (and thus precludes us from reducing the 
strong equivalence problem for the automata to that for the schemas). 

We note also that if the execution of S„ terminates for some 
interpretation I, the final value associated with symbol y for the 
execution will depend on the length of M 1 s computation on the input 
strings defined by I. Since the length of the computation made by an 
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equivalent automaton on the same set of strings may be quite different 
from that made by M, it would seem that the simulation is not suitable 
even for a reduction of the weak equivalence problem. Fortunately, the 
following lemma implies that such is not the case: 

Lemma 6.1 : 

Let M be an n-tape automaton, for some n > 0. Then we may construct 
from M an equivalent n-tape automaton M 1 such that precisely one tape 
head is advanced at each step of any convergent computation by M. 

Proof : Let Q and T be the states and tape symbols, respectively, of M. 
Let f be the transition function and h the head advancement 
function of M. We first modify M so that no more than a single 
head is advanced during a step of any computation by the 
automaton: 

Let q be a state in Q and let cp be an element of T such 

that h(q,cp) = {j-.,...,j m } for some m > 1. We add to Q new 

t it (m-1) 
states q, q, ... , q and extend f and h to these new 

states so that f(q ,6) = q and hCq^^a) = {j i+1 3, for all 

6 € T and all i, 1 <; i <; m-1. For each 6 € T n , we define 

f(q* m-1 \6) to be the state f(q,cp) and we define h(q (m-1) ,6) to 

be {j }. Finally, we redefine f(q,cp) to be state q 1 and h(q,cp) 

to be {j-,}. The procedure is repeated for any additional 

arguments for which the value of h is a set of cardinality 

greater than one, and the resultant automaton has the desired 

property. 
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Assume now that no more than one head is advanced during 
any step in a computation by the automaton. Whenever we have 
f(q>q>) = 1* f°? some states q and q' and some cp G T such that 
h(q,cp) - and h(q',cp) j* 0, we redefine f(q,cp) to be f(q',cp) 
and redefine h(q,cp) to be h(q',cp). This procedure is repeated 
as long as such q,q' and cp can be found. The resultant 
automaton is H*. 

□ 



Thus we have: 

Theorem 6.1: 

The weak equivalence problem for multi-tape finite automata reduces to 

the weak equivalence problem for independent location iteration schema s. 

Proof : Let M and M, **• a-tape automata for soma n > y and let M^ and 

M' be the automata constructed from M. and M. as in the 

preceding lemma. Let S„i and Sgi be the simulating schemes 

12 
constructed fromM' and M' as in Section 6.4.1. Then M and M 1 

are weakly equivalent if and only if S^i and S^i are weakly 

1 2 

equivalent. 

D 



As we shall see in the next section, Theorem 6.1 is a more interesting 
result than it seems at first glance, since the weak equivalence problem 
for the automata can be shown unsolvable. 
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6.5 Undecidability of Weak Equivalence for Independent Location Schemas. 

In this section we demonstrate that weak equivalence is undecidable 
for multi-tape finite automata and hence, according to Theorem 6.1, for 
independent location iteration schemas. 

The following result was implied in [12] and demonstrated explicitly 
in [19]. The proof given here is essentially that in the latter paper. 

Lemma 6.2 : 

The inclusion problem for multi-tape finite automata is unsolvable. 
That is, it is recursively undecidable whether L(M) cl(H') for 
arbitrary n-tape automata M and M' . 

Proof: Let C be the Post Correspondence Problem defined in Section 4.1. 

It is a trivial matter to construct a 2-tape automaton M such 

that L(M) = {(*, u) | h = ijjig* ... #ijg, where # is some 

special symbol, and for each j, 1 £ j £ jG, i. is a symbol 

denoting integer i., 1 ^ i. ^ k; and <«> = <*>, • u • ... • w. }. 
J J l x i 2 ijj 

Also, we can construct another 2-tape automaton M' such that 
L(M') = ,{(h, Y ) | H is as in L(M) and Y is any word other than 
Yi •Y i • ... *Y4 }. Clearly, C has a solution if and only if 
L(M) £L(M'), a » d hence the decidability of inclusion for multi- 
tape automata implies the solvability of the unsolvable Post's 
Correspondence Problem. 

□ 
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We now reduce the inclusion problem for multi-tape finite 
automata to the weak equivalence problem for the automata. 

Lemma 6.3 ; 

Let M be an n-tape automaton, for some n > 0. Then we can construct 

from M an n-tape automaton M' such that L(M) ■ L(M' ) and M' rejects no 

input. 

Proof : Informally, we add a new state q to the states of M, and provide 
transitions from q back to q for each length n string from M' s 
alphabet. Each transition into the rejecting state of M is 
replaced with a transition into this new state, and the resultant 
automaton isH'. 

□ 

The following lemma is derived ifflnediately from Lemma 6.1: 

Lemma 6,4 ? 

Let M be an n-tape automaton, for some n > 0. Then we can construct 
from M an n-tape automaton M' such that L(M) ■ L(M') and M' rejects any 
input which is not accepted. 

Proof : We construct f rom M the automaton M 1 of Lemma 6,1. We than add 
a new state q to this machine, and redefine f(q.,cp) to be q 
whenever h(q.,cp) ■ j9, where f and h are the transition and 
advancement functions of M' , q is any state in M 1 , and cp is 
any length n string of tape symbols. We extend f and h to state 
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q as follows: 

If cp is a string of length » other i.iftto'#, '*we define f(q,cp) 
to be q and h(q, 9) to fee { i \ the ith component of cp is not $ , 
isiSn], If cp is $ n , then f (q,9) ie^, where q^ is the 
rejecting state of M*, and h<qs,cp) iai^ empty set . The 
resultant automaton is M". 

□ 

From these lemmas we obtain: 

Theorem 6.2; 

The inclusion problem f or aulti-tape £ittite autoii»t» is reducible to 

the weak equivalence problem for the automata. 

Proof ; Let M. and IL be arbitrary n-tape automata, for some n > 0. 

Let M' be the automaton constructed f rom M^ as in Lemma 6.3. 

Let M" be the automaton constructed from M- as in Lemma 6.4. 

2 .*" 

Then L(M ) c Lfllj) if and only if ft^ and ft n 2 are weakly 

equivalent. 

■ □ 

Corollary 6.5: 

The weak equivalence problem for independent Ideation iteration schema s 

is unsolvable. 

Proof : Immediate from Theorem 6.1, Lemma 6.2, and Theorem 6.2. 

D 
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6.6 Single State Automata. 

The problems which prevent the strong simulation of multi-tape 
automata by iteration schema* stem from tiie feet that an interpretation 
for a Simula ting schema must include a suitable "definition" of the 
sequence of atates entered by the automata during its computation; the 
schema's execution must diverge if this sequence is incorrect or is 
unreasonably defined. Since equivalent automata will generally have 
different state sets, there is no way to ensure that schemes which 
simulate equivalent automata will both diverge or both converge under a 
given pair of consistent interpretations. In particular, we can generally 
provide such sehemas with interpretations which are reasonable (in the 
sense of Section 6.4.1) for one sctema but unreasonable for the other, 
thus forcing one schema to diverge under its interpretation while 
permitting the other to converge. 

We would expect, on the other hand, that automata with a single 
state would present no such problems, although we might question whether 
such automata are capable of recognizing any interesting languages and 
whether their equivalence problems are related in any non-trivial way 
to those for multi-tape automata in general. 

In this section we demonstrate that the iteration sehemas are 
indeed capable of strongly simulating such automata, and also show that 
the automata are capable of recognizing non-trivial languages. We show, 
in fact, that the equivalence problem for multi-tape automata reduces to 
a restricted equivalence problem for the single state automata. 
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6.6.1 Single State Automata - Definitions. 

Actually, the term single state automaton is something of a 
misnomer, since the automata which we define below contain two states. 
The function of the initial state of an automaton, however, is simply 
to ensure that the automaton begin a computation in one of some finite 
number of designated configurations. In particular, once the initial 
state is left no transitions back into the state are permitted; also, 



no movement of the tape heads is permitted while the automaton is in 
its initial state or moving out of the state. (Intuitively, we might 
think of the initial state as something of an "input monitor": if the 
tuple of initial symbols on the automaton's tapes is acceptable, the 
control state of the automaton is entered and the computation carried 
out. If the tuple is not acceptable, the initial state is never left 
and the computation diverges.) 

The definition which follows is essentially the same as that given 
in Section 6.1 for multi-tape automata, except that we dispense with 
accepting and rejecting states and define the advancement and transition 
functions in such a way as to ensure that the initial state is as 
described above. (The automata will have no rejecting states, and their 
control states will function as accepting states.) 

A jiagifi state n-feape automaton is a five-tuple 

M - (T, q, q r f, h) 

where: T is a finite set of tape symbols , including the endmarker $. 
q is the control state of the automaton. 
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q-r is the initial state of the automaton. 

f: {q*^} XT 11 -* {q,q x } is the state transition function , a 
total function satisfying the property that f(q,tp) ■ q, all cp € x . 

h: {q.qp Xl B -» 2^ 1 » 2 '"" n5 is the head advancement function. 
a total function satisfying the properties that b(qj,cp) * 0, and i jiE 
h(q,cp) whenever the ith component of cp is $, for all cp € T 11 . 

Configurations and computations are defined for single state 
automata in the same manner as for multi-tape automata in general. An 
n-tuple A of strings in T* is accented by M if there is a finite 
computation by M ending with the configuration (q,A*$ ), and is 
rejected by M if no such computation exists. The languages accepted 
and rejected by M are defined as for multi-tape automata. 

Strong and restricted equivalence are defined for single state 
automata as in Section 6.2. We shall not consider notions of weak 
equivalence for the automata. 

6.6.2 Strong Equivalence — A Reducfbllity. 

Let M * ({s 1 ,...,s k ,$}, q, q>, f, h) be a sittgte^ state n-tape 
automaton, for some n > 0. 

We shall show how to construct ah independent location iteration 
schema S^ which simulates M. (The construction is quite similar to that 
described in Section 6.4.1, and we use much of the same terminology.) 

SL has variable symbols x. x and y. It has predicate symbols 

P 8 >«»»»P S »P$ and p . It has a single function symbol g. 



' ' f'V ^l^SS^S^-w" 
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Expressions of the form P. (x.) and P^x ) are as defined in 

■i J § J 

Section 6.4.1; we use the same enumeration of length n strings over the 



alphabet of M, and the expressions P , ... , P 



<Pi 



in that section. 



^Ck+i) 1 



are as defined 



For each i, Mis (k+1) , we def ine S., to -^be. the schema: 



*h(q, %) *" 8<X h(q,cp i ) ) 
IF p m (y) THEN S £ ELSE S f 

y *- g(y) 



IF p (y) THEN S„ ELSE S A 
*m w E t 

y - g(y) 



l times, where JL is the 

cardinality of h, 

(q,9i) 



For each i, 1 s i < (k+1) , we define R. to be the schema: 
IF P THEN S ± ELSE R^ 



We define R 



(k+1) 1 



to be the schema: 



IF P rt _ THW S 

V+D n 



(k+1) 



ELSE S A 
n t 



Now, let 6 .,..., 6. be an enumeration of those length n strings 
for which f(q_,6 ) * q, 1 & I £ ti The» Sjj Is the schema: 



IF (P g V ... V P 6 ) THEN S„ ELSE S 
WHILE p (y) DO 1L 



6 i v "" v *v — E — * 



IF (P^(x n ) A ... A P.(x )) THEN S_ ELSE S, 
$ 1 ? n E t 
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We define reasonable interpretations for Sl. in a manner analogous 

to that in Section 6.4.1, and note that each reasonable Interpretation 

defines an n- tuple of strings over M's alphabet. The reader may verify 

that S diverges for all unreasonable interpretations, . and converges for 

a reasonable interpretation I if and only if I defines a tuple of strings 

accepted by M and assigns to p ffl a predicate II- such that: 

m 

n (g^A ) = true, all i < X 
m y 

n (g^Ay) - false , i - I 
m 

where JL is the number of symbols in the tuple of strings defined by I. 

In such a case, the final value associated with y will be g »A . 



We have Immediately: 

Theorem 6.3 : 

The strong equivalence problem for single state multi-tape automata 

reduces to that for independent location iteration schemes. 

Proof : Let M and M' be single state n-tape automata, for some n > 0. 
We construct from M and M* the simulating schemes Sjj and S„, 
as above, and note that M and M' are strongly equivalent if 
and only if S„ and SL, are strongly equivalent. 

□ 
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6.7 Equivalence of Multi-Tape Automata - A deducibility Result. 

We have shown that the strong equivalence problem for single 
state multi-tape automata reduces to that for structured independent 
location schema s. In this section, we provide motivation for that 
result by shewing that such automata constitute a surprisingly rich 
class of multi-tape automata, and are in fact capable of simulating 
arbitrary automata if we allow them additional tapes on which to store 
control information. Since the particular information which is stored 
on these tapes will depend on the automaton being simulated, we must 
content ourselves with shewing that the strong equivalence problem for 
multi-tape automata reduces to a restricted equivalence problem for the 
single state automata. 

We begin with some useful definitions: 

Let cp ■ Sjl 'S^ • ... «s 4 »s, «... be a string over some 
1 2 x k x k+l 

alphabet T which does not contain the special symbol #. Then an expansion 
of cp is any string of the form: 

cp e - . li -6 1 .(#) 3 l.. l2 .6 2 .(#) J *- ... •s ik -6 k .(#) Jk -s ik+i .6 k+1 .(#) Jk+1 ... 

in which for each i, 6 is an arbitrary spring in I* and J. is an integer 
greater than 0. We extend the notion of expansion to tuples of strings 
and sets of such tuples in the obvious manner: 

If A - (9 X , ... , cp n ) is a tuple of strings over T, then an expansion 

of A is any tuple A - (c^ , . . . ,■ cp ) in which for each i, 1 £ i £ n, 

e n e 

cp. is an expansion of cp . If X is a set of tuples of strings over T, then 
e x 

the expansion of X is the set EXP(X) - {A |A is an expansion of some A €X). 



- 130 - 

Let M be an n-tape automaton with tape alphabet I and control 

states represented by a set of symbols Q, and such that no more than a 

single tape head is advanced during any step in a computation by M. 

Let A = {cp. , . . . , cp } be a tuple of strings accepted by M. Then the 
L n 

trace of A with respect to M is the n+4-tuple of strings A «= 

{a,P , Y,Y, 9^, ... , cp n } over IUQU {T, ... , n}, such that a€ 

— — * 
[1, ... , n} represents the sequence of tape heads moved during the 

computation by which M accepts A, p € T* is the sequence of symbols 

scanned during the computation, and y € Q represents the sequence of 

states entered by M during the computation. We denote by TRACE (M) the 

set {A | A is the trace of some A accepted by M}. 

As we shall see, it is precisely the information in the first four 
components of a trace which constitutes the control information required 
by a single state automaton in the simulation of an arbitrary multi-tape 
automaton. 

We note that if cp is a string over an alphabet T not containing #, 
then the expansion of 9 formed by inserting # between each pair of 
symbols in cp cannot be obtained as an expansion of any other String. 
Thus we have: 

Lemma 6.6 : 

Let M and M* be n-tape finite automata whose tape alphabets do not 
contain the symbol #. Then M and M* accept the same language if and 
only if EXP(L0O) * EXP(L(M*)). __/ 
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Lemma 6.7 : 

Let M be an n-tape automaton (T, Q, q , q , q , f, h) such that exactly 

X a it 

one tape head is advanced during each step of any convergent computation 
by M, some n > 0. Then we may construct from M a single- state automaton 
M 1 with n-hl tapes, such that L(M' ) = EXP(TRACE(M)). 

Proof : A formal definition of M' appears in Appendix C. We describe 
the behavior of M 1 informally below: 

Let Q be the set of symbols {q. | q^ is a state in Q}, and 
let N = {1,2, ... ,n}. The alphabet of M 1 is the set T 1 = 
T U Q U N U {#}, where # is a special symbol not appearing in T. 

We may represent a configuration of M' as an n+4-tuple of 
strings over T 1 , and we say that a configuration A is a base 
configuration of M' if TAIL(A) is of the form 7«s» <lf\'V, 
where A € N is such that & = h(q.,cp) in M, and s is the jfcth 
symbol in cp € T 11 . Intuitively, a base configuration of M' 
represents some configuration of M just prior to some step a in 
a computation by M. The first four tapes in such a base 
configuration contain the following information: 

(1) The head of M which is to be advanced at step » of M's 
computation. 

(2) The symbol currently under scan by this head. 

(3) The current internal state of M, recorded on each of tapes 
3 and 4. 

We shall describe the sequence of moves by which M' advances 
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to a new base configuration representing the configuration of M 
at the conclusion of step A> of its computation: 

M 1 moves head 4+4 until the symbol # is scanned. It then 
moves head 4 until # is scanned, and likewise head 1. 
(Intuitively, we may think of M' as preparing these tapes for 
its next base configuration.) 

M 1 advances head 4 past any number of #'s until a non-# 
is scanned. Unless this symbol is q , where q = f(q ,cp) in M, 
the computation diverges, i.e. M' advances no tape head. This 
behavior of M 1 ensures that tape 4 has the symbol representing 
the internal state of M after step s&* of its computation. 

M 1 advances head 2 and then head 3 until #'s are scanned 
on these tapes. It then advances head 4+4 past any number of 
#'s until some symbol s' € T is scanned on the tape, diverging 
if the first symbol after the #'s is not a symbol in T. At this 
point, M 1 has discarded the original scanned symbol and internal 
state of M since this information is no longer needed; it has 
also advanced the appropriate tape head and scanned symbol s', 
so that each of the last n tape heads is scanning a symbol in T. 
Let cp' denote the string composed of these n scanned symbols: 

M 1 advances head 2 past #'s, until some s" <S T is scanned 
such that s" is under scan on the k+4th tape of M', where k is 
h(q ,cp'). If the first symbol after the #'s is not such an s", M' 
diverges. M' will thus have ensured that the "symbol under scan" 
component of its next base configuration is correct. 



133 



M 1 now advances head 1 past any number of it's until a symbol 
X' € N is scanned such that V - htq,,^ 1 ). If any symbol other 
than !' immediately follows the #'s, M' diverges. M 1 thus ensures 
that the "head to be advanced" component <y£ its next base 
configuration is correct. 

Finally, M* advances head 3 past any number of #'s until 
symbol % is scanned on that tape, diverging if a symbol other 
than q is scanned first. At this point, W has reached the 
desired base configuration. 

The reader may verify that the conditions governing moves 
are unique in each case, and thus that the behavior of M' as 
outlined is consistent with the requirement that M 1 have a single 
control state. (Of course, we need to add rules ensuring that a 
computation of M* begins at a base configuration representing an 
initial configuration of M, and additional rules allowing a 
computation of M 1 to terminate if a base configuration represents 
a terminal configuration of M, but the addition of such rules 
is straightforward: the curious reader is referred to Appendix C). 



□ 



We are now in a position to prove the main result of this section: 

The.2rem.6j4: 

The strong equivalence problem for multi-tape automata reduces to a 

restricted equivalence problem for single state automata. 
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Prqq f ; Let M and M' be arbitrary n-tape automata, for some n > 0. From 
Lemma 6.1, we can assume without loss of generality that exactly 
one tape head moves during each step of any convergent computation 
by either schema. Let M and W be single state acceptors for 
EXF(TBACECM)) and EXP(TRACECM')), respectively, constructed as in 
the preceding lemma. Then from Lemma 6.6, L(H) * L(M*) if and 
only if M g and M' s are N-restricted equivalent, N - {5,6,...,n+4}. 
We may interchange the accepting and rejecting states of M and M' 
to obtain n-tape automata M and M 1 such that L(M) • L(M) and 
LCH' ) » L(M* ). If we construct single state acceptors M 8 and M 1 
for E3q?C2MC8$b) and EXP(T8ftCE# r », then M is equivalent to M' 
if and only if M g and M' a , and M s and 5*' , are paitwlae 
N-restricted equivalent. 

D 
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6.7 Discussion. 

We have attempted in this chapter to relate the equivalence problems 
for structured and non- structured independent location schemas. We began 
by looking at a class of automata equivalent to the non- structured 
schemas, and showed that such automata could be simulated by structured 
schemas which diverge whenever they are provided with interpretations 
not corresponding to valid computations. While such a simulation might 
be of some practical interest, Corollary 6.5 shows that it is of little 
value if our concern is with such issues as schematological equivalence. 
In fact, the corollary suggests that weak equivalence is likely to be 
undecidable even for classes of schemas for which strong equivalence .is 
decidable. If we are looking for potentially solvable problems or 
potentially useful reducibilities, therefore, we had best restrict 
attention to strong equivalence and strong simulations. 

Via Theorems 6.3 and 6.4, we have been able to establish another 
relation between the equivalence problems for the structured and non- 
structured schemas. While the relation is admittedly somewhat indirect, 
it never- the- less raises some questions (for example, regarding the 
decidability of equivalence for single state automata) which are of 
interest in their own right. it would seem, therefore, that this 
relation is worth pursuing. 
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CHAPTER VII: SUMMARY 

In this thesis we have introduced iteration schemas (monadic 
schemas composed of assignment statements, conditional statements, and 
iteration statements) and have shown that such schemas correspond to 
monadic program schemes with structured flowcharts. We have also shown 
that the schemes form an incomplete subclass of the monadic program schemas 
in the sense that there exist monadic program schemas which are not 
equivalent to any iteration schema. 

We have defined several subclasses of iteration schemas: 
(i) Free schemes in which tests are never repeated during schema 

executions. 

(ii) Single appearance schemas ia which predicate symbols occur only 

once. 

(iii) Conditional - free schemas composed solely of assignment statements 
and iteration statements. 

(iv) Independent location schemas in which the assignment and argument 
variables are one and the same in each assignment statement. 

(v) Restricted location schemas in which initial assignment 
statements of the form *x *- y' are permitted, but which otherwise are 
independent location schemas. 

We have formalised the notion of schema equivalence as the functional 
equivalence of schemas under free interpretations, and have explored the 
equivalence problems for these various classes of iteration schemas. We 
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were able to show that equivalence is undecidable for restricted location 

schemas, and strengthened the proof to demonstrate the undecidability of 

equivalence for such schemas which are conditional -free. We concluded 

that restricting the schemas to a single function and predicate symbol 

avails nothing in solvability, and that equivalence is unsolvable for 

such schemas with just two variable symbols. We have also shown that 

arbitrary nesting of iteration statements is not essential to unsolvable 

problems, and that unsolvability is with us for schemas with just two 

levels of iteration and for conditional- free schemas with just three 

levels. 

We considered other features of the schemas for which we were able 
to demonstrate unsolvability, and this suggested several possibly solvable 
domains. We established techniques enabling us to demonstrate the 
decidability of equivalence for free schemas which are single appearance, 
or which are independent location and conditional-free; and for the class 
of schemas which are single appearance and conditional- free. While several 
interesting problems are left open, we are confident that the methodology 
developed can be extended to more general classes of iteration schemas. 
The results established in this thesis are summarized in Fig. 10, along 
with some of the more interesting open problems. 

We have explored in some detail the way in which equivalence problems 
for independent location iteration schemas are related to equivalence 
problems for independent location program schemas and multi-tape finite 
automata. We have shown that the iteration schemas are capable of 
"weakly" simulating such automata, and have used this result to demonstrate 
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shown. 

*Solvable, but details are not given. 



FIGURE 10: Stannary of Results. 
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the undecidability of weak equivalence (i.e. equivalence for terminating 
computations) for the independent location iteration schema s. We have 
shown that the equivalence problem for m»lti-t#p» automata with a single 
control state is reducible to that for in Japea d e nL location iteration 
schemas, and have also demonstrated that the equivalence problem for the 
automata in general reduces to the problem of deciding whether single 
state automata are equivalent over some arbitrary subset of their tapes. 

The obvious areas for further study are suggested by Fig, 10. 
A positive solution to the equivalence problem for free iteration schemas 
would be a major achievement since it would lend solid support to the 
conjecture that non-freeness is an essential characteristic pf unsolvable 
problems. Such a solution for restricted loc&tiori schema* would also be 
welcome since it would at least establish a "freeness" boundary between 
decidability and undecidability for these schema*. Finally, « positive 
solution to the equivalence problem for independent location iteration 
schemas would be, we feel, a major step in the solution of the equivalence 
problem for independent location schemas in general; at the very least 
it would provide, by Implying the decidability of equivalence for single 
state automata, an additional avenue by which to approach the equivalence 
problem for multi-tape automata in general, an open problem of long 
standing. 
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APPENDIX A: Decidability of Freeness for Independent Location Schemas 

Let S be an arbitrary independent location schema, and let F be its 
flowchart. We say that a pair of nodes in F are similar if both nodes 
are transfer nodes labelled 'p(x) 1 for some predicate symbol p and 
variable symbol x. We claim that S is free if and only if each directed 
path from a node n to a similar node n' in F contains an assignment node 
labelled 'x ♦- f(x)' where f is some function symbol and x is the 
variable symbol of n and n': 

(IF) If such is the case, then no variable is ever tested twice with the 
same predicate during an execution of S without an intervening assignment 
to the variable. Since S is an independent location schema, it is clear 
that no test can ever be repeated during a free execution of S. 

(ONLY IF) An essential characteristic of a free schema is that every path 
through its flowchart corresponds to an execution of the schema. If there 
exists a directed path from n to n' containing no assignment labelled 
'x ♦- f(x)' for some f, then a value associated with x will be tested at 
both n and n 1 during any execution of S which traverses this path, and 
thus S cannot be free . 
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APPENDIX B: Undecidability of Equivalence for Restricted Location Schema s 
With One Function Symbol and One Predicate Symbol. 

We 8 ha 11 redefine the schemas of Section 4.3. The schema S n is: 



UNTIL p(x) DO S_ 



The schema S. is: 



WHILE p(x) DO S E 
Schemas S' Q and S' are defined similarly. 
For each i, Is isk.A 

IF p(v) THEN 8^ ELSES t 
x «- f (x) l 

v «- f (v) 

IF p(v) THEN S ELSE S. 

x «- f (x) 2 

v «- f (v) 



„ , W THSM . M S, 

X 4- f(x) °1 

V 4- f (v) 

where s. '8. • ... -a. - w, » as befefce. Schemas of the form B_ are 

i l *2 H 1 Y i 

defined similarly, with symbol u in place of v. 

For each i, 1 < i < k, R is: 

W i *" f ^ W i^ 



IF p(w.) THEN A, ELSE S., 
IF p(w.) THEN B ELSE R. +1 



'1 
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The schema R 1 is : 



w l 


*• f(w.) 




z 


♦• f<«) 




IF 


p(w ) THEN A 

1 


ELSE S_ 
E 


IF 


p<w,) THEN B 
1 *l 


ELSE iL 


schema R, is: 






w 
k 


«- f(w k ) 




IF 


p(w k ) THEN A u 


ELSE Sg 


IF 


p(w. ) THEN B 
k \ 


ELSE S + 



The schema S is: 

y ♦- x 

u ♦* v 

IF p(z) THEN R. ELSE ^ 

WHILE p(z) DO R 1 

IF p(v) THEN S 4 ELSE S_ 

T & 

IF p(u) THEN S ELSE S_ 

T E 

We note here that, in contrast to the results established in [18] 
for monadic program schema* in general, we are unable to establish the 
undecidability result for schema s which have simultaneously single 
predicate and function symbols and two variable symbols. 
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APPENDIX C: Definition of M 1 . 

Let T, N, Q, and T' be as in the proof of Lemma 6.7. In the following, 
s's shall denote elements of T, i's elements of N, q's elements of §, 
lower case Greek letters elements of T*, and x's arbitrary symbols in T' 
other than # and $. 

M' is (T' , q, q T ' , f, h') where f is defined as follows; 

i) f^'.X) . - q if X is i-a-q^i-Vtlte** q ± i* MfafWl to Kg 
I - h(q 1> u) in M, and s is the jfcth symbol of w. 
ii) f(q,X) - q, all X € (T 1 )' 1 ** 4 . 

and h' is defined as follows: 
— <* a 



i) h'(q, A'8.q i *q i -a-x-p) - X+4, |aj - jfc-1. 



ii) h'(q, j&.S-q^q^a.f.p) -4. 
iii) h'(q, x-s-q^f-a^.p) - 1. 
iv) h'(q, #.s*q t .f-a.#'p) -4. 
v) h'(q, ^-s-^-qj-a-ilt-p) - 2, if q - hCq^ a-s-p) in M. 
vi).h'(q i #f.5 l .q j .a.#.p) - 3. 
vii) h'(q f If^.qj.a^.p) - |a|+5. 
viii) h'(q, ##.^-7) -2. 

ix) h'(q, #-s.#'q «y) - 1, if h(q ,y) is defined in M and equals I 
for some I such that s 1 is the /th symbol of y; or s' - $ and y - $ n . 

x) h'(q, J-s-#-q -y) - 3 if h(q -y) - I and s 1 is the jith 
symbol in y- 
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Xi) h'(q, #$- qj .q.-$ ) = 1. 

xii) h'(q, $$- qj . qj .$ n ) = 3. 

Xiii) h'(q, $$#.q..$ n ) = 4. 

Xiv) h'(q, $$##$") = 3. 



XV) h'(q, $$$#$) = 4. 



and is undefined in all other cases. 
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